Graph Matching and Metrics Intrusion Detection System (GMIDS)

The Graph Matching and Metrics Intrusion Detection System (GMIDS) is a novel approach to detecting insider and coordinated insider-outsider threats. GMIDS is based on our proven algorithms for graph-based pattern matching, social network analysis, linkanalysis, and statistical pattern recognition. GMIDS performs data fusion on information from dense sensor networks inside and outside the secured system to build a graph representation of network topology, user activity, and network state. Threatpatterns are represented as graphs, and our subgraph isomorphism (graph matching) and social network analysis capabilities quickly identify suspicious activity within the sensed network state. GMIDS provides new capabilities for