Correlation analysis of abnormal network traffic

The paper deals with the simulation methods of information system behavior. Attention is paid to the difficulties of dynamic system models application which are accounted for functional dependence of temporal distribution on a large number of parameters as well as for the lack of initial data. An approach to attack detection is proposed on the basis of analysis of deviation from autocorrelation function