基于数据挖掘的网络入侵检测系统模型

Network Intrusion Detection System Model Based on Data Mining

本文论述了数据挖掘技术用于入侵检测的优势,针对知识库更新的智能化处理,在分析关联规则算法的基础上,提出了一个基于数据挖掘的入侵检测模型。该模型可以有效地检测新的攻击类型,实现知识库的自动更新,从而提高了入侵检测的高效性。

This paper discusses the advantage on the application of Data Mining in intrusion detection. On the base of analyses of mining association rule and intelligent update of Knowledge Base, a model of intrusion detection based on Data Mining is presented. Using the model, new type of network attacking can be detected effectually. Automatic update of knowledge base is performed and validity of intrusion detection is improved.