数据挖掘技术在入侵检测分类中的应用

Application of Data Mining in the Classification of IDS

数据挖掘技术可以从多个角度应用于入侵检测系统,通过合理地分类对比,可找出基于数据挖掘技术的优势,发现存在的问题,提出新思路,完善和发展入侵检测系统;首先介绍了应用于入侵检测的数据挖掘算法;然后提出了基于数据挖掘的入侵检测系统的分类,并分别对每种分类方法的实现进行了描述;最后提出了基于日志挖掘的入侵检测系统,并对可行性进行了简单论证.

Data mining techniques can be applied to IDSs from many aspects. We can find out the advantage and disadvantage of data mining, and propose new ideas to improve and develop IDSs by reasonable classification. In this paper, we introduce some data mining algorithms application to IDS. Then we present a classification method of IDS based on data mining, and describe the process of each method. Finally we propose a IDS based on log mining and demonstrate its feasibility.