Chapter 6 – Machine Learning in Anomaly Detection Systems

1. What is an anomaly?

An anomaly is something that deviates from what is standard, normal, or expected.

2. What is a Markov chain?

A Markov chain, or what we call a Markov process, is a stochastic model used for any random system that change its states according to fixed probabilities.

3. What are Hidden Markov models?

The Hidden Markov Model is a Markov process where we are unable to directly observe the state of the system. Each state has a fixed probability of emitting. The main goal of an HMM model or classifier is assigning a label to a family of sequences, which means linking a sequence of observations to a sequence of labels.

4. How can we detect anomalies with Hidden Markov models?

According to the Hidden Markov Model definition, we can use it to discriminate between normal and abnormal behavior of network...