基于云模型的入侵检测研究

由于网络行为的不确定性,使现有入侵检测系统几乎都存在高误报率和高漏报率的缺点。云模型是将模糊性和随机性有机结合进行不确定性推理的有效工具。本文利用云模型来处理网络实体行为的不确定性,提出了一种新的云入侵检测方法。该方法通过基于云知识库的云推理引擎进行不确定性推理,以对网络实体行为进行智能判断。模拟结果表明该方法能有效提高入侵检测效率。

Study of Intrusion Detection Based on Cloud Model

Because of the uncertainty of network behavior,the exiting intrusion detection systems almost have some flaws,such as the high false positive rate and high false negative rate. Cloud model is an effective tool of uncertainty reasoning in transforming between qualitative concepts and their quantitative expressions combined with fuzziness and randomness. Based on cloud model,a new cloud intrusion detection method(CIDM) was presented in this paper. Cloud reasoning generator cloud intelligently processes networ...