基于DM的入侵检测系统结构方案

Framework of an Intrusion Detection System Based on DM

介绍了入侵检测系统和数据挖掘技术的概念、特点和关键技术,分析了入侵检测系统中信息收集的主要数据来源,结合传统的入侵检测方案的缺点,提出了一种基于数据挖掘技术的具有自我学习、自我发展能力的入侵检测系统的体系结构模型,此模型针对不同的信息来源应用不同的数据挖掘方法进行识别。

In this paper, the conception, the characteristic and key technique of Intrusion Detection System and Data Mining are introduced. And the main data source of information collection in the Intrusion Detection System is analyzed. This paper combines the shortcoming of the framework of traditional Intrusion Detection, and also specifies a framework of a self-training and self-development Intrusion Detection System based on Data Mining. The framework adopts different methods of Data Mining to identify according to different information.