Hybrid Event-Triggered IDS — Research notes
2024-06-20 • Python · ML · Networking
Research notes for a hybrid intrusion detection system targeting CAN bus traffic, combining lightweight rules with ML to reduce inference cost.
### Summary
The hybrid IDS uses cheap rule-based filters to reduce the data fed to an ML model, lowering inference costs while preserving detection recall.
Design reminders
- Evaluate false negative risk introduced by prefilters
- Measure end-to-end latency under load
- Focus on memory-efficient models for edge deployment