一种基于模糊理论的自适应入侵检测方法

An Adaptive Intrusion Detection Method Based on Fuzzy Theory

针对模糊转换过程中等价转换失真问题和网络记录中属性差异对入侵检测造成的影响,提出关键属性列表、属性作用度列表和属性类型列表等概念,将动态反馈机制引入入侵检测,提出一种基于模糊理论的自适应入侵检测方法。实验表明该方法能有效提高入侵检测系统的检测率,降低其误报率,增强计算机系统抵御入侵及自身免疫能力。

In view of the influence of equivalent conversion distortion in fuzzy conversion process and difference in network records attribute, this paper puts forward such conception as the key attribute table, attributes effect degree and attribute types list, and bring the dynamic feedback mechanism into intrusion detection system, proposes an adaptive intrusion detection method based on the theory of fuzzy. The experimental results show that the method can effectively enhance the intrusion detection system detection rates and reduce their error rate, strengthen their immune system to resist the invasion.