| 一种改善入侵检测系统性能的新方法 |
| |
| 引用本文： | 史志才. 一种改善入侵检测系统性能的新方法[J]. 计算机应用, 2007, 27(3): 619-620 |
| |
| 作者姓名： | 史志才 |
| |
| 作者单位： | 大连大学信息工程学院 辽宁大连116622 |
| |
| 摘 要： | 针对高速网络环境下基于知识的入侵检测系统因搜索的知识库庞大，耗时过多，导致丢包而影响到系统的性能等问题，通过引入网络流量的反馈机制，采用随机投影算法，灵活调整模式匹配过程中知识库的规模，以提高入侵检测系统的实时性，减少系统的丢包率，从而有效降低系统的误漏报率，以此改善入侵检测系统的性能。
|
| 关 键 词： | 入侵检测 信息安全 随机投影 |
| 文章编号： | 1001-9081（2007）03-0619-02 |
| 收稿时间： | 2006-09-20 |
| 修稿时间： | 2006-09-192006-11-30 |
A novel method to improve the performance of intrusion detection systems |
| |
| SHI Zhi-cai. A novel method to improve the performance of intrusion detection systems[J]. Journal of Computer Applications, 2007, 27(3): 619-620 |
| |
| Authors: | SHI Zhi-cai |
| |
| Affiliation: | Information Engineering Institute, Dalian University, Dalian Liaoning 116622, China |
| |
| Abstract: | The knowledge base is so huge that intrusion detection systems based on knowledge use much time to search the results. Hence a lot of packets are lost in the environment of high-speed network. In order to solve the problem, the feed back mechanism of the network traffic was introduced. Random projection algorithm was used to flexibly adjust the scale of the knowledge base during the pattern matching procedure. The real-time performance of intrusion detection systems was enhanced. The rate of lost packets and the false warning rate of the systems were reduced. |
| |
| Keywords: | intrusion detection information security random projection |
| 本文献已被 CNKI 维普 万方数据 等数据库收录！ |
| 点击此处可从《计算机应用》浏览原始摘要信息 |
|
点击此处可从《计算机应用》下载全文 |
