入侵检测系统中关联规则挖掘技术的研究

Research on the Technology of Association Rule Mining in Intrusion Detection System

在入侵检测系统中使用关联规则分析,挖掘网络数据中系统特征之间的关联关系,创建正常行为库,找出异常连接。描述了一种改进的FP_树算法——NFP_树算法,用以进行入侵检测关联规则的挖掘,实验证明,此算法比传统的关联算法在入侵检测中的应用效果更好。

Intusion detection system uses the analysis of association rule to mine the association relationship of network data and system feature, establish the normal behavior stock and find out the abnormal connection. The report discribes a improved FP_tree algorithm NFP_tree algorithm and uses it to mine asssociation rule in IDS. The experiment shows that the algorithm has better results than traditional association algorithm in IDS.