状态转换图在IDS中的应用

The Application of STAT in IDS

入侵检测系统 (IDS)作为一种重要的计算机系统安全监测手段 ,已经成为维护网络安全的主要技术之一 本文提出的改进模型是在一个现有的入侵检测原型系统的基础之上 ,利用STAT(StateTransitionAnalysisTool,状态转换分析工具 )技术对其分析引擎增加了有效的辅助模块 ,并使用数据挖掘技术对原始审记数据进行初步的数据清洗 与原有的IDS相比 ,改进后的系统有效地提高了入侵检测性能和精度 。

As an important security inspection approach of computer system, Intrusion Detection System (IDS) has become an indispensable technology for maintaining network security. The improved model put forward by this paper is based on a current IDS prototype and adds an efficient assistant module to its analysis engine by using STAT (State Transition Analysis Tool) technology, and it also uses data mining technique to perform preparatory data purge on the original audit records. Compared with previous IDS prototype, the improved system promotes the performance and precision of intrusion detection effectively and possesses fine expansibility and robust.