数据挖掘技术在入侵检测系统中的应用探析

Application of Data Mining in Intrusion Detection System

该文介绍了入侵检测的重要性以及传统入侵检测的类型和局限性,指出利用数据挖掘技术可以克服这些局限性。提出了基于数据挖掘的入侵检测系统和一种改进的Apriori算法,并对系统结构及各部分的功能进行了分析。该算法应用于此系统来提取用户行为特征和入侵模式特征,提高了整个系统的性能和安全性。

This paper introduces the importance of intrusion detection as well as the traditional type of intrusion detection and limitations,pointed out that the use of data mining technology can overcome these limitations.Based on data mining intrusion detection system and an improved Apriori algorithm,the system structure and function of part of the analysis.The algorithm used in this system to extract the char-acteristics of user behavior and characteristics of invasion patterns,improve overall system performance and security.