| 摘要 |
A method and apparatus can be configured to receive, by a first network intrusion detection system, packet data that is transmitted in network traffic. The method can also include processing the received packet data, using feature hashing, into a hashed representation. The hashed representation approximates the expressiveness of a high-dimensional representation of the received packet data. The hashed representation can be stored using less memory compared to the high-dimensional representation. The method can also include classifying the hashed representation as either corresponding to a threat signature or as not corresponding to a threat signature. |
