数据挖掘在网络异常检测中的应用

Application of Data Mining in Network-based Anomaly Intrusion Detection

简要介绍了入侵检测技术,研究将数据挖掘技术应用于网络异常检测,应用数据挖掘中的关联分析方法和序列模式分析的方法提取网络审计数据中的正常或异常的行为模式,这种模式用频繁情节规则表示.

After introducing the technology of intrusion detection ,the paper studies the anomaly detection using datamining in a network environment.The method of association analysis and frequent episode mining are applied to generate association rules and frequent episode rules which can represent the normal or intrusion behaviors.