Abstract
Intelligent intrusion and detection strategies for reducing false positives and increasing detection within real network infrastructures has been a major challenge in information security. Current strategies often lack real network infrastructure detection and responses for distinguishing between benign traffic and complex attacks. This intelligent hybrid detection and response strategies distinguishes between real attack and normal traffic. This novel strategy consists of a hybrid statistical analysis involving Ward's hierarchical clustering. This results of the hybrid statistical analysis is fed back to the IDS' alert monitor to identify real attacks and isolate benign traffic. This intelligent detection and response strategy enhances the ability of the IDS to accurately detect and respond to subsequent threats and benign traffic in critical segments of real network infrastructures.