摘要
入侵检测系统是信息安全领域研究的热点问题。在阐述入侵检测系统概念和类型的基础上,指出了当前入侵检测系统的优点及局限性。神经网络、遗传算法、模糊逻辑、免疫原理、机器学习、专家系统、数据挖掘、Agent等智能化方法是解决IDS局限性的有效方法。介绍并着重分析了2种基于智能方法的IDS,提出了IDS在今后发展过程中需要完善的问题。
IDS is the hot topic in the field of information security. On the elaborated concept and types of IDS, the merit and limitation of the current IDS are pointed out. The intellectualized neural network, genetic algorithm, fuzzy logic, immunity, machine learning, export system, data mining, Agent and so on are effective approaches to overcome the limitation of IDS. Two kinds of IDS based on intelligent method are introduced and analyzed. Finally, issues about IDS that will be consummated in the next developing are put forward.
关键词
IDS
入侵检测专家系统
人工神经网络
异常检测
智能体
intrusion detection system
intrusion detection expert system
artificial neural network
anomaly detection
agent.
