基于灰色模型的入侵检测系统研究

分析现有入侵检测系统需要大量数据建模的缺陷基础上,从灰理论建模的历史数据少、不考虑分布规律、变化趋势、运算简便特点出发,剖析入侵检测系统的灰理论建模思想,提出了一种基于灰色模型的入侵检测系统(GMIDS)。该系统所需原始数据较少,建模速度较快,并且经过两次建模和两次检测待检数据,降低了误检率和漏检率。经实验验证该系统是有效的。

Research on Intrusion Detection System Based on Grey Model

Current intrusion detection system is lack of efficiency because there need large-scale data in formulating the model,which is too much complicated in real-time use.However,models based on Grey Theory need less original data and can be easily developed.This paper prompts a new system model derived from the idea of Grey Theory,with significance of less requirement on original data scale,less limitation of the distribution pattern and the variation tendency of the data,simpler in algorithms and more effective in model construction.This system need less original data and can be formulated quickly.Authors make the model to be formulated twice and the detecting data is detected twice to ensure a low rate of false drop and false retrieval.The simulation proves that the system is effective.