| 基于决策树和协议分析的入侵检测研究 |
| |
| 引用本文： | 宋明秋,傅韵,邓贵仕. 基于决策树和协议分析的入侵检测研究[J]. 计算机应用研究, 2007, 24(12): 171-173 |
| |
| 作者姓名： | 宋明秋 傅韵 邓贵仕 |
| |
| 作者单位： | 大连理工大学,系统工程研究所,辽宁,大连,116023;大连理工大学,系统工程研究所,辽宁,大连,116023;大连理工大学,系统工程研究所,辽宁,大连,116023 |
| |
| 摘 要： | 当前大多数入侵检测产品使用的是基于规则的简单模式匹配技术,它们存在着资源消耗量大、误报率高以及随着网速的提高出现丢包等问题。针对这些问题,提出了用决策树算法实现基于协议分析的入侵检测方法。试验结果表明,该方法具有较高的检测速度和较低的正误报率。
|
| 关 键 词： | 决策树 协议分析 入侵检测 |
| 文章编号： | 1001-3695(2007)12-0171-03 |
| 修稿时间： | 2006-10-25 |
Intrusion detection via decision tree and protocol analysis |
| |
| SONG Ming qiu,FU Yun,DENG Gui shi. Intrusion detection via decision tree and protocol analysis[J]. Application Research of Computers, 2007, 24(12): 171-173 |
| |
| Authors: | SONG Ming qiu FU Yun DENG Gui shi |
| |
| Affiliation: | (Institute of System Engineering, Dalian University of Technology, Dalian Liaoning 116023, China) |
| |
| Abstract: | Most of intrusion detection systems use simple pattern matching technology based on rules, however, they have the problem of low efficiency and high alarm rate positive. In order to improve efficiency and decrease positive alarm rate, presented a new method of using decision tree. It realized intrusion detection system based on protocol analysis. The experiment results show that it has high performance and low false positive. |
| |
| Keywords: | cision tree protocol analysis intrusion detection |
| 本文献已被 维普 万方数据 等数据库收录！ |
| 点击此处可从《计算机应用研究》浏览原始摘要信息 |
|
点击此处可从《计算机应用研究》下载全文 |
|
