基于数据发掘的入侵检测建模

Building Intrusion Detection Model Based on Data Mining

数据发掘是从大量数据中发掘出新的、有用模式的过程。把它用于入侵检测,可从审计数据中发掘系统活动特征的有用模式,指导训练数据的收集和特征的选择,建立活动分类机制。研究了基于入侵检测模型建立的过程和所用到的算法。

Data mining is a process of identifying novel and potentially useful patterns in data. Using DM techniques,useful patterns of system behavior features can be discovered. The discovered patterns can guide the audit data gathering and feature selection ,and with the set of system feature,classifiers that can recognize anomalies and known intrusions can be computed.In this paper , we study the process of building ID model and the algorithms used. ;;;;