computer-science-processes-database/processes/security/security-intrusion-detection.json

{
  "id": "security-intrusion-detection",
  "name": "Intrusion Detection",
  "category": "computer_science",
  "subcategory": "security",
  "subcategory_name": "Security & Cryptography",
  "description": "Intrusion Detection process visualization. This process flowchart outlines key steps, checks, and outputs.",
  "complexity": {
    "nodes": 10,
    "edges": 10,
    "conditionals": 2,
    "logicGates": {
      "orGates": 2,
      "andGates": 1,
      "notGates": 0,
      "total": 3
    },
    "level": "high",
    "detailLevel": "source_grounded_rebuild",
    "loops": 1
  },
  "colorScheme": {
    "red": {
      "hex": "#ff6b6b",
      "category": "Triggers & Inputs"
    },
    "yellow": {
      "hex": "#ffd43b",
      "category": "Structures & Objects"
    },
    "green": {
      "hex": "#51cf66",
      "category": "Processing & Operations"
    },
    "blue": {
      "hex": "#74c0fc",
      "category": "Intermediates & States"
    },
    "violet": {
      "hex": "#b197fc",
      "category": "Products & Outputs"
    }
  },
  "mermaid": "graph TD\n    N1[\"Intrusion Detection research...\"]\n    N2[\"Telemetry Streams\"]\n    N3[\"Threat Model\"]\n    N4[\"Sensors/Agents\"]\n    N5[\"Rules/ML Model\"]\n    N6[\"Normalize Events\"]\n    N7{\"Detect + Alert\"}\n    N8[\"Incident Ticket\"]\n    N9{\"Source-grounded check...\"}\n    N10[\"Intrusion Detection...\"]\n\n    N1 --> N2\n    N2 --> N3\n    N3 --> N4\n    N4 --> N5\n    N5 --> N6\n    N6 --> N7\n    N7 -->|yes| N8\n    N8 --> N9\n    N9 -->|yes| N10\n    N8 -->|iterate| N3\n\n    style N1 fill:#ff6b6b,color:#fff\n    style N2 fill:#ff6b6b,color:#fff\n    style N3 fill:#ff6b6b,color:#fff\n    style N4 fill:#ffd43b,color:#000\n    style N5 fill:#ffd43b,color:#000\n    style N6 fill:#51cf66,color:#fff\n    style N7 fill:#51cf66,color:#fff\n    style N8 fill:#b197fc,color:#fff\n    style N9 fill:#ffd43b,color:#000\n    style N10 fill:#b197fc,color:#fff",
  "sources": [
    {
      "title": "Intrusion Detection System and Artificial Intelligent",
      "authors": "M., Khattab",
      "journal": "Intrusion Detection Systems",
      "year": "2011",
      "pubmed": null,
      "doi": "10.5772/15271",
      "url": "https://doi.org/10.5772/15271"
    },
    {
      "title": "Security Engineering",
      "authors": "Anderson, R.",
      "journal": "Wiley",
      "year": "2020",
      "pubmed": null,
      "doi": null,
      "url": "https://www.cl.cam.ac.uk/~rja14/book.html"
    },
    {
      "title": "The OAuth 2.0 Authorization Framework",
      "authors": "Hardt, D.",
      "journal": "RFC 6749",
      "year": "2012",
      "pubmed": null,
      "doi": "10.17487/RFC6749",
      "url": "https://doi.org/10.17487/RFC6749"
    },
    {
      "title": "Zero Trust Architecture",
      "authors": "Rose, S.; Borchert, O.; Mitchell, S.; Connelly, S.",
      "journal": "NIST Special Publication 800-207",
      "year": "2020",
      "pubmed": null,
      "doi": "10.6028/NIST.SP.800-207",
      "url": "https://doi.org/10.6028/NIST.SP.800-207"
    }
  ],
  "keywords": [
    "intrusion",
    "detection"
  ],
  "relatedProcesses": [],
  "created": "2026-01-15",
  "lastUpdated": "2026-04-30",
  "verified": false,
  "notes": "Corrective rebuild: replaces the generic scaffold with a process-specific step structure and records topology for duplicate detection.",
  "namedCollections": [],
  "graphMetrics": {
    "nodes": 10,
    "edges": 10,
    "conditionals": 2,
    "andGates": 1,
    "orGates": 2,
    "notGates": 0,
    "loops": 1
  },
  "nodeDetails": [
    {
      "id": "N1",
      "label": "Intrusion Detection research...",
      "detail": "Intrusion Detection research question",
      "type": "process",
      "role": "Triggers & Inputs"
    },
    {
      "id": "N2",
      "label": "Telemetry Streams",
      "detail": "Telemetry Streams",
      "type": "process",
      "role": "Triggers & Inputs"
    },
    {
      "id": "N3",
      "label": "Threat Model",
      "detail": "Threat Model",
      "type": "process",
      "role": "Triggers & Inputs"
    },
    {
      "id": "N4",
      "label": "Sensors/Agents",
      "detail": "Sensors/Agents",
      "type": "process",
      "role": "Structures & Objects"
    },
    {
      "id": "N5",
      "label": "Rules/ML Model",
      "detail": "Rules/ML Model",
      "type": "process",
      "role": "Structures & Objects"
    },
    {
      "id": "N6",
      "label": "Normalize Events",
      "detail": "Normalize Events",
      "type": "process",
      "role": "Processing & Operations"
    },
    {
      "id": "N7",
      "label": "Detect + Alert",
      "detail": "Detect + Alert",
      "type": "decision",
      "role": "Processing & Operations"
    },
    {
      "id": "N8",
      "label": "Incident Ticket",
      "detail": "Incident Ticket",
      "type": "process",
      "role": "Products & Outputs"
    },
    {
      "id": "N9",
      "label": "Source-grounded check...",
      "detail": "Source-grounded check: Intrusion Detection System and Artificial Intelligent",
      "type": "decision",
      "role": "Structures & Objects"
    },
    {
      "id": "N10",
      "label": "Intrusion Detection...",
      "detail": "Intrusion Detection prediction/readout",
      "type": "process",
      "role": "Products & Outputs"
    }
  ],
  "flowchartStandard": {
    "name": "source_grounded_rebuild_v1",
    "applied": "2026-04-30",
    "curationStatus": "source_grounded_draft",
    "basis": "cs_exact_template",
    "topologySignature": "daf2b2b0504cb88f",
    "sourceGrounding": "Graph steps are derived from the process title, existing source metadata, and curated process/subfield templates; citations support the process topic and should be reviewed for node-level claims before marking verified."
  }
}