摘要
经过对现有的入侵检测系统的分析,认为多点协同检测能够使入侵检测系统更加准确、有效地检测入侵。提出一种基于本体的模式匹配方法,同时对协同式入侵检测的体系结构与协调方法进行了讨论,它可以使检测工作更加灵活,另外也提供了全局的信息定位以支持协同检测。
After a survey of present IDSs, it was concluded that more accurate and efficient detection result could be obtained by using multi-sensor cooperative detection. A matchmaking method based on ontology was given to improve flexibility of detection. Cooperative detection framework based on the ontology was also discussed.
出处
《计算机应用》
CSCD
北大核心
2005年第7期1554-1557,共4页
journal of Computer Applications
关键词
入侵检测
本体
协同检测
intrusion detection
ontology
cooperative detection
