| 高速网络环境下的自适应入侵检测方法研究 |
| |
| 引用本文： | 史志才.高速网络环境下的自适应入侵检测方法研究[J].计算机工程与应用,2009,45(17):88-90. |
| |
| 作者姓名： | 史志才 |
| |
| 作者单位： | 上海工程技术大学,电子电气工程学院,上海,201620 |
| |
| 基金项目： | 上海工程技术大学科研基金，上海市教委科研创新项目 |
| |
| 摘 要： | 为了实现高速网络环境下的入侵检测，对入侵检测的杌理进行探讨，将入侵检测归结于不完备数据集上的推理过程，提出知识库的相似度、完备度等概念，并用其对知识库的规模和增长速度进行控制，从而保证入侵检测在有限规模的空间中进行搜索。同时，采用信息增益等方法将入侵检测转换到低维空间上进行。实验结果表明上述方法有效降低了入侵检测系统的计算负荷，提高了其实时响应性能。
|
| 关 键 词： | 计算机网络 信息安全 入侵检测 |
| 收稿时间： | 2008-4-7 |
| 修稿时间： | 2008-6-30
|
Research on intrusion detection with self-adaptability for high-speed network |
| |
| SHI Zhi-cai.Research on intrusion detection with self-adaptability for high-speed network[J].Computer Engineering and Applications,2009,45(17):88-90. |
| |
| Authors: | SHI Zhi-cai |
| |
| Affiliation: | Electronic &; Electric Engineering Institute，Shanghai University of Engineering Science，Shanghai 201620，China |
| |
| Abstract: | In order to detect intrusions of high-speed network，the mechanism of intrusion detection is discussed.Intrusion detection is reduced to an inference procedure on an incomplete data set.The concepts of self-similarity degree and completeness degree of the knowledge base are proposed.They are used to control the scale and increasing speed of the knowledge base so that intrusion detection is assured to be proceeded in a limited space.At the same time，information gain is used to make intrusion detection to running in a lower space.The experiments show that the proposed method reduces the calculation load of intrusion detection systems effectively and enhances its real time performance. |
| |
| Keywords: | computer network information security intrusion detection |
| 本文献已被 维普 万方数据 等数据库收录！ |
| 点击此处可从《计算机工程与应用》浏览原始摘要信息 |
|
点击此处可从《计算机工程与应用》下载全文 |
