面向IDS的可变长检测器生成算法研究

Research on Intrusion Detection System oriented variable length detector algorithm

在基于人工免疫的入侵检测系统(IDS)中,检测器集合直接影响检测结果的效率和准确度。针对目前基于人工免疫的IDS中检测效率和漏警率问题,提出了一种可变长检测器生成算法。该算法相对于已有的算法,降低了黑洞区域,减少了冗余检测器,提高了检测器生成效率和检测效率。给出了算法的设计思想、具体步骤以及在入侵检测系统中的具体实现。对算法的分析和实验表明,本算法用于入侵检测系统,提高了检测的准确率,降低了漏警率。同时,对各种异常检测向题具有一定的适用性。

Detector set affects efficiency and veracity of the Intrusion Detection System based on artificial immunity system. A variable length detector algorithm is presented aiming at the efficiency and false negative rate of intrusion detection system based on artificial immunity system.Compared with the other algorithms, it decreases the holes and redundancy detectors. The design thought, detail procedure and the realization in intrusion detection system are also proposed.An experimental exam and results are given to prove that this algorithm is effective in Intrusion Detection System.At the same time, the algorithm can also holds for other abnormal detector problems.