摘要
在深入研究了端口扫描检测中传统关联规则算法的应用的基础上,提出了将加权关联规则算法应用到端口扫描检测中。该方法不但可以及时发现缓慢扫描、分布式扫描以及多种隐蔽扫描,而且有效地解决了传统关联规则算法中因未考虑网络数据固有的时间特性而引起的漏检问题。
The application of traditional association rules algorithm in Port Scanner Detection is discussed in this paper. The application of Weighted Association Rules in Port Scanner Detection is proposed on base of it. Slow scanning and types of stealth scannings etc. Can be detected by this technique. The problom of missing detection in traditional association rules algorithm because of no considering of time effect in the data of network is solved effectively.
出处
《现代计算机》
2006年第8期23-25,共3页
Modern Computer
关键词
网络安全
端口扫描
加权关联规则
Network Security
Port Scanner
, Weighted Association Rule
