| 加权关联规则在基于主机的入侵检测系统中的应用 |
| |
| 引用本文： | 曹元大,薛静锋. 加权关联规则在基于主机的入侵检测系统中的应用[J]. 北京理工大学学报(英文版), 2002, 11(4): 418-421. DOI: 10.3969/j.issn.1004-0579.2002.04.019 |
| |
| 作者姓名： | 曹元大 薛静锋 |
| |
| 作者单位： | 北京理工大学,计算机科学与工程系,北京,100081 |
| |
| 摘 要： | 为了解决将关联规则算法应用于入侵检测系统提高系统检测率的同时也增加系统误报率的问题,将加权关联规则算法应用于入侵模式的挖掘中,在一定程度上提高了入侵检测的检测率,并降低了误报率.在此基础上,提出了采用加权关联规则算法的基于主机的入侵检测系统的结构.
|
| 关 键 词： | 网络安全 入侵检测系统 关联规则 加权 |
| 收稿时间： | 2002-01-09 |
The Application of Weighted Association Rules in Host-Based Intrusion Detection System |
| |
| CAO Yuan-da and XUE Jing-feng. The Application of Weighted Association Rules in Host-Based Intrusion Detection System[J]. Journal of Beijing Institute of Technology, 2002, 11(4): 418-421. DOI: 10.3969/j.issn.1004-0579.2002.04.019 |
| |
| Authors: | CAO Yuan-da and XUE Jing-feng |
| |
| Affiliation: | Department of Computer Science and Engineering, Beijing Institute of Technology, Beijing100081, China;Department of Computer Science and Engineering, Beijing Institute of Technology, Beijing100081, China |
| |
| Abstract: | Association rules are useful for determining correlations between items. Applying association rules to intrusion detection system (IDS) can improve the detection rate, but false positive rate is also increased. Weighted association rules are used in this paper to mine intrustion models, which can increase the detection rate and decrease the false positive rate by some extent. Based on this, the structure of host-based IDS using weighted association rules is proposed. |
| |
| Keywords: | network security intrusion detection system association rules weight |
| 本文献已被 CNKI 维普 万方数据 等数据库收录！ |
| 点击此处可从《北京理工大学学报(英文版)》浏览原始摘要信息 |
|
点击此处可从《北京理工大学学报(英文版)》下载全文 |
