Jev-IDS: System One Models for Network Intrusion Detection
JEV-IDS is an experimental Network Intrusion Detection System designed to find zero-day intrusions when labeled data is scarce. It uses the Jev System One Model (SOM) to ask structured, typed questions about network flows instead of generating free text. The system proves that JEV offers a good balance between detection accuracy and fast, cheap operation compared to other methods.