基于数据挖掘的入侵检测系统研究

Intrusion Detection System Based on Data Mining

文章将数据挖掘引入入侵检测系统,介绍了应用几种数据挖掘方法进行入侵检测的过程,其基本思想是运用数据挖掘的方法发现用户行为轮廓,检测新的入侵方式。并在此基础上提出了一种基于Agent的入侵检测系统模型,这种模型中数据挖掘Agent持续地进行挖掘分析并为检测Agent提供最新的检测规则。最后对该IDS中相关的问题进行了分析。

Abastract:In this paper data mining methods are used to solve intrusion detection problems.The key ideas are to use data mining techniques to discover consistent and useful patterns of system features that describe program and user be-havior.An agent based IDS is proposed here,where the data mining agents continuously compute and provide the updat-ed detection models to the detection agents.At last,it discusses problems to be solved.