<span lang="EN-US">The identification of abnormal situations in information and telecommunication systems is considered, based on analyze statistical information of network traffic packages. The method of identifying an anomalous situation based on segmentation of data sample is proposed. The method is aimed at using classifying algorithms that have the best quality indicators on individual data segments. The proposed method will be useful for monitoring information security systems. The method registers of factors that affect the change in the properties of targeted variables. Impact detection allows you to generate data samples, depending on current and expected situations. On the example of the NSL-KDD dataset, there was a division of many data into subset, taking into account the influence of the factors on the range of values. The processing of factors is shown using the change point detection function in the time series. With its use, a division of data sample by the final number of non-intersecting measurable subsets has been made. The results of Accuracy, Precision, F-Measure, Recall for various classifiers are shown. The proposed method allows to increase the quality indicators of classification in continuously changing operating conditions of telecommunication systems.</span>
Read full abstract