基于数据挖掘的入侵检测系统框架

A Framework of Intrusion Detection Based on Distributed Data Mining Approach

提出了基于分布式数据挖掘的入侵检测系统框架 .详细讨论了该系统的实现方案、模块结构和关键技术 ,最后给出了系统训练和评价方法 .该系统以基于关联规则方法的分布式数据挖掘技术为核心 ,从而实现了规则库的自动生成和更新 ,并能有效检测大规模协同攻击 .

Put forward a framework of IDS using distributed data mining approach We discussed in detail about the architecture of system, the structure of modules and the key technology of the implementation of this system. Finally, we offered the training and evaluation scheme for the system.