Abstract
Network attack detection is currently one of the most important problems in network technologies. In addition to proactive attack mitigation, they use network intrusion detection systems that scan all network traffic and signal it if any anomalies are found. The main problem of network intrusion detection systems is the low efficiency of detecting fundamentally new types of intrusions, which have not yet been studied and entered into the signature database. To solve the problem of false positives in intrusion detection systems, the authors propose to use heuristic methods for making decisions about intrusions. The method of the intrusion detection system is proposed to increase the reliability of intrusion detection using a heuristic model of the intrusion detection system and increase the battery life of the system.