Cyber Dynamics I: Finite Macrostates for Behavioral Anomaly Detection in Network Telemetry

Entropy-based methods have long been used for network anomaly detection, but most existing approaches treat entropy as a scalar statistic on narrow observables rather than as part of a broader behavioral state-space for cyber systems. We propose a finite-dimensional macrostate framework for network ...