Date Added: May 2009
Detecting network intrusion has been not only important but also difficult in the network security research area. In Medical Sensor Network (MSN), network intrusion is critical because the data delivered through network is directly related to patients' lives. Traditional supervised learning techniques are not appropriate to detect anomalous behaviors and new attacks because of temporal changes in network intrusion patterns and characteristics in MSN. Therefore, unsupervised learning techniques such as SOM (Self-Organizing Map) are more appropriate for anomaly detection. In this paper, the authors' propose a real-time intrusion detection system based on SOM that groups similar data and visualize their clusters.