通用入侵检测知识自优化框架

Common Intrusion Detection Knowledge Self-optimization Frame

For Intrusion Detection System, it is very important that system has enough and valid detection knowledgeset. This heavily depends on experience of an individual administrator. If we could have the experience of individualshared by different systems, the collaborative systems will exchange the new detection knowledge automatically. Itwill dramatically improve the performance of systems as a whole. This paper presents a novel idea: Intrusion Detec-tion Knowledge Self-Optimization, gives and implements a Common Intrusion Detection Knowledge Self-optimizationFrame. The frame could manage different subsystems, The same type of subsystems could share and optimize detectionknowledge automatically.