摘要
对于目前入侵防御系统(IPS)中规则库日益增大并且无法完备的特点,提出了一套完备化规则库系统。通过对网络操作行为的分解和对各种数据的挖掘,形成最基本最小的网络行为语言描述单元(网络行为描述DNA),再使用Teiresias进化算法对其进行全局遍历性的组合,计算产生新的描述语言,进行可行性判断后,对可行的结果进行规则匹配并进行风险评估,产生新的防御规则,从而达到入侵防御系统规则库完备的目的。
Regarding the characteristic that rule base of intrusion prevention system grows rapidly and is unable to complete,the paper proposes a complete rule base.Through the decomposition of network operation behavior and the data mining of various data,forms the most basic smallest unit of network operation behavior（DNA of network action description）,uses the Teiresias evolution algorithm to carry on the overall situation ergodicity combination to produce the new description language.After the feasible judgment,carries on the rule base matching and the risk assessment,then produces the new defense rule,thus reaches the goal of completing the rule base of IPS.
出处
《计算机工程与应用》
CSCD
北大核心
2009年第9期88-91,共4页
Computer Engineering and Applications
基金
河南省杰出人才创新基金(No.074200510013)
河南省教育厅自然科学基金(No.2007520048)。
