基于SNMP进行数据挖掘的入侵检测系统研究

Intrusion Detection System Based on SNMP Data Mining

网络攻击日益隐蔽化和复杂化,传统入侵检测方法对此有很大局限性,该文提出将入侵检测系统和SNMP网络管理系统相结合,根据攻击的本质特征,使用数据挖掘技术从SNMP的网络统计数据中获取检测规则的方法,能有效实现对隐蔽和复杂攻击的检测。

The network attacks become more and more ulterior and complicated which can deceive the traditional intrusion detection method. This paper discusses the application of data mining in intrusion detection, mining rules from SNMP data according to the essence of network attack. This method is efficient enough to meet the need of active detect complex intrusion.