一种基于模糊聚类的新型入侵防御攻击系统模型

A New Intrusion Prevention and Attack System Model Based on Fuzzy Clustering

本文从降低传统入侵防御系统检测引擎的虚警率、漏警率与增强主动防御能力方面入手,给出了一种基于模糊聚类的入侵防御系统检测引擎实现方案;并探讨了将蜜罐技术与入侵防御系统相结合的可行性;进而提出了一个全新的入侵攻击防御系统模型。在这个模型中,入侵防御系统同时具有了实时防御与攻击防御的能力。

In order to reduce the false and missed alarm rates of detection engine in the traditional intrusion prevention system and enhance the active defense capabilities, an program based on fuzzy clustering implementations is given in this paper. Combined with the honey pot technology, a new intrusion prevention system model is established. In this model, the intrusion prevention system has got the ability of real- time defense and attack defense.