电力信息网络入侵检测研究

分析了电力信息网络安全结构及存在的入侵问题,提出将数据挖掘算法应用于电力信息网络的入侵检测。在入侵检测中使用关联规则分析算法,挖掘网络数据流中特征之间的关联关系。提出了一种针对网络入侵检测规则生成方法的AR_Tree算法,该算法解决了传统关联规则算法存在的多次扫描和无效规则问题。实验证明,此算法在规则生成和对网络入侵检测方面应用效果比传统算法优越,可以有效检测电力信息网络中的入侵行为。

Research on intrusion detection of power information network

This paper analyses the security structure of power information network and the intrusion problems,presents the idea that data mining algorithm should be applied in intrusion detection of power information network.Association rule algorithm is applied into intrusion detection to find associated relation in network data stream.In addition a method aiming at network intrusion detection—AR_Tree algorithm is presented,which can solve the problem of frequent multi-scan and invalid rule in traditional association rules. This method is proved to be more efficient than traditional algorithm and can detect the intrusion in power information network effectively.