| 基于网络性能异常检测算法的研究 |
| |
| 引用本文： | 张凤斌,杨永田. 基于网络性能异常检测算法的研究[J]. 哈尔滨理工大学学报, 2004, 9(3): 105-108 |
| |
| 作者姓名： | 张凤斌 杨永田 |
| |
| 作者单位： | 哈尔滨工程大学,计算机科学与技术学院,黑龙江,哈尔滨,150001;哈尔滨理工大学,计算机与控制学院,黑龙江,哈尔滨,150080;哈尔滨理工大学,计算机与控制学院,黑龙江,哈尔滨,150080 |
| |
| 基金项目： | 黑龙江省自然科学基金[F9814]，哈尔滨市学科后备带头人基金[2003AFXXJ013]，黑龙江省教育厅科学技术研究项目[10541044] |
| |
| 摘 要： | 针对目前入侵检测系统不能有效检测未知入侵行为的问题，提出了一种新的入侵检测系统．在结构上采用分布式结构，各个检测器不但具有针对主机的检测功能，还可以联合起来检测大规模的分布式网络入侵行为．对网络数据的检测根据遗传算法在动态环境中的鲁棒性、自适应性强的特点，采取了将遗传算法为主，并借鉴人工免疫系统的思想，给出了一种基于网络性能的异常检测算法．经实验证明，此算法实时性强，能有效地检测未知的入侵行为．
|
| 关 键 词： | 网络 异常 入侵检测 遗传算法 误报率 |
| 文章编号： | 1007-2683(2004)03-0105-04 |
| 修稿时间： | 2004-05-19 |
Research of Anomaly Detection Algorithm Based on Computer Network |
| |
| ZHANG Feng-bin,YANG Yong-tian. Research of Anomaly Detection Algorithm Based on Computer Network[J]. Journal of Harbin University of Science and Technology, 2004, 9(3): 105-108 |
| |
| Authors: | ZHANG Feng-bin YANG Yong-tian |
| |
| Abstract: | In order to solve the problem that IDS can't detect undefined intrusion behavior effectively, this paper proposes a prototype of IDS. We construct the structure based on the distributed IDS. So the detectors of this IDS not only can detect intrusion behavior based on host and network in local network, but also can cooperated with other detectors to detect the large scale network intrusion. According to the robustness and adaptability of the genetic algorithms, we present an algorithm on anomaly detection oriented to computer network. It was proved that the algorithms can detect undefined intrusion behavior effectively. |
| |
| Keywords: | network anomaly intrusion detection genetic algorithms false alarm rate |
| 本文献已被 CNKI 维普 万方数据 等数据库收录！ |
