用CLIPS构建基于CVE的入侵检测专家系统

Build a CVE-Based Intrusion Detection Expert System upon CLIPS

论述了一个实时的入侵检测专家系统的设计及实现,并把重点放在如何用CLIPS构建一个基于CVE的入侵检测专家系统上。它监控目标系统的不同类型的对象的行为,以检测由内部或外部人员引起的安全妨害。系统能随着时间的推移自适应地学习目标的行为模式,并检测偏离这些模式的行为。

This paper describes the design and implementation of a real-time Intrusion Detection Expert System and lays a strong emphasis on the how to build a CVE-Based Intrusion Detection Expert System upon CLIPS .this system is an independent system that monitors the activities of different types of subjects,such as users and remote hosts,of a target system to detect security violation by both insiders and outsiders as they occur.And it can adaptively lean subjects'behavior patterns over time and detects behavior that deviates from these patterns.