序列模式挖掘在入侵检测中的应用研究

Research on Sequential Pattern Mining in Intrusion Detection System

入侵检测系统是计算机安全体系中的一个重要构成要素,随着网络数据流量的不断增大,与数据挖掘相结合的入侵检测系统成为了研究热点。本文针对计算机入侵检测中网络安全审计数据的特点,提出了一个改进的PrefixSpan算法,并通过检测一个网络审计记录的实验,进行了结果分析。

The Intrusion Detection System （IDS, Intrusion Detection System） is an important com- ponent of the computer security architecture. With the increasing data flow of network, the intrusion detection system that is combined with the data mining has become a research hotspot. An improved PrefixSpan algorithm based on time constraints and attribute-relative is developed to fit into the network audit data of computer intrusion detection. The experiment of dealing with a computer network audit da- tabase gives the application and result analysis of the algorithm.