System, method, and computer software code for detecting a computer network intrusion in an infrastructure element of a high value target

A method for detecting and defeating unauthorized intrusion within a computer network of an infrastructure element of a high value target, the method comprising:

• receiving data from the computer network of the infrastructure element of the high value target;
• filtering the received data;
• applying grammars produced with a grammar based compression and learning algorithm to the filtered data;
• expanding a sampling of the filtered data, after the grammars have been applied, with polymorphic transformation;
• analyzing the expanded sampled data to determine the unauthorized intrusion;
• and
• recommending whether the unauthorized intrusion has occurred occurs based on the analyzed data.

A non-transitory computer-readable media comprising routines which are executed on a processor for detecting and defeating an unauthorized intrusion within a computer network of an infrastructure element of a high value target, the non-transitory computer-readable media configured for:

• receiving data from the computer network of the infrastructure element of a high value target;
• filtering the received data;
• applying grammars produced with a grammar based compression and learning algorithm to the filtered data;
• expanding a sampling of the filtered data, after the grammars have been applied, with polymorphic transformation;
• analyzing the expanded sampled data to determine the unauthorized intrusion;
• and
• recommending whether the unauthorized intrusion has occurred based on the analyzed data.