How to aggregate scores in a multi-heuristic detection system : A comparison between WOWA and Neural Networks

Cyber-attacks are becoming increasingly complex and therefore require more sophisticated detection systems. A lot of these are actually combine multiple detection algorithms. A crucial step is then to aggregate all detection scores correctly.

Today we released a short paper where we compare two aggregation approaches:

1. train a Weighted Ordered Weighted Average (WOWA) operator using a genetic algorithm and
2. train a Neural Network using backpropagation.

Download the paper: How to aggregate scores in a multi-heuristic detection system : A comparison between WOWA and Neural Networks [PDF]

This blog post is licensed under CC BY-SA 4.0