基于模糊综合评判的入侵检测算法研究

计算机通信网络的安全防御措施-入侵检测系统作为现今研究的热点,入侵检测技术得到了前所未有的发展,尤其是模糊入侵检测技术。而模糊入侵检测存在误警率普遍较高的问题。通过对入侵检测算法的研究,针对模糊化所引起的问题,提出了协议分析与模糊综合评判相结合的检测算法,并将协议分析部分作为进行模糊综合评判的前提条件,即依据协议类型的不同采用了不同的权重向量和由单因素评判向量构成的评判矩阵的不同的模糊综合评判。实验结果证明,算法的检测效果较佳,问题解决且正好符合入侵检测系统所追求的,即检测率很高而误警率却是很低。

An Algorithm of Intrusion Detection Based on Fuzzy Comprehensive Evaluation

The security measures of computer communication network-intrusion detection system is presently a hotspot,and intrusion detection technology,especially fuzzy intrusion detection technology has got an unprecedented development.But there is generally a problem of high rate of false alarm.Through studying intrusion detection algorithms,aiming at the problem cased by fuzzy technique,the paper proposes a detection algorithm by combining protocol analysis with fuzzy comprehensive evaluation,and the algorithm carr...