| 基于程序追踪的程序关联模型的研究 |
| |
| 引用本文： | 曾文权,尚敏.基于程序追踪的程序关联模型的研究[J].微电子学与计算机,2006,23(12):200-202. |
| |
| 作者姓名： | 曾文权 尚敏 |
| |
| 作者单位： | 广东科学技术职业学院,计算机工程技术学院,广东,广州,510640 |
| |
| 摘 要： | 文章针对入侵检测方式中的传统关联分析方法所存在的问题，利用程序追踪方法来补足关联分析所需的信息．并提出了一种新的关联分析模型——程序关联模型。该模型可以弥补传统分布式入侵检测系统难以检测的一些攻击手法．从而提高了IDS的入侵检测率。
|
| 关 键 词： | 程序追踪 程序关联模型 关联分析 入侵检测 |
| 文章编号： | 1000-7180（2006）12-0200-03 |
| 收稿时间： | 2005-11-28 |
| 修稿时间： | 2005年11月28 |
The Research of Process Relationship Correlation Model Based on Process Tracing |
| |
| ZENG Wen-quan,SHANG Min.The Research of Process Relationship Correlation Model Based on Process Tracing[J].Microelectronics & Computer,2006,23(12):200-202. |
| |
| Authors: | ZENG Wen-quan SHANG Min |
| |
| Affiliation: | Dept. of Computer Engineering, Guangdong Institute of Science and Technology, Guangzhou 510640, China |
| |
| Abstract: | This article aimed at the question of traditional Correlation analyse in Intrusion Detection, make up the information needed for correlation analysis to using process tracking, which proposed a new Correlation analysis model - PRCM.The model can make up for some of the methods of attack detection difficult in traditional DIDS,thereby increasing the Intrusion Detection rates of IDS. |
| |
| Keywords: | Process tracing Process relationship forrelation model Correlation analyse intrusion detection |
| 本文献已被 CNKI 维普 万方数据 等数据库收录！ |
