基于数据挖掘技术的智能化入侵检测模型

An Intelligent Model of Intrusion Detection Based on Data Mining Approach

给出了一个基于数据挖掘技术智能化入侵检测模型,它由若干个对等式执行入侵检测功能的单元IDU(intrusion detection unit)组成,每个IDU参照通用入侵检测轮廓CIDF(common intrusion detection framework)构建,该模型采用关联规则、序列规则对数据进行挖掘,用判定树分类技术对获得的模式进行分类。实验表明,该模型具有较好的效益。

This paper puts forward an intelligent model of intrusion detection based on data mining approach. It is composed of many intrusion detection units (IDU). Each IDU is built according to the common intrusion detection framework (CIDF). The data mining of association rule and sequence mode is used to come into being rules. The rules are classified by decision tree. These tests showed this model is valid.