数据挖掘在网络入侵检测中的应用

Data Mining Applied to Network Intrusion Detection

数据挖掘又称为数据库中的知识发现,是多学科综合的产物。入侵检测是用于检测任何损害或企图损害系统的保密性、完整性或可用性行为的一种网络安全技术。基于异常检测的入侵检测,有大量的数据需要处理,如何减少误报而又快速地检测出异常,数据挖掘具有很大的空间可以运用。

Data mining, also known as knowledge discovery in databases is the product of an integrated multi- discipline. Intrusion detection is used to detect any damage or attempt to undermine the system of confidentiality, integrity or availability acts as a network security technology. In anomaly detection based on intrusion detection, there are large amounts of data need to be addressed; how to reduce false positives and detect anomalies quickly, data mining can be of great use of space.