IDS中的模糊关联规则挖掘与响应  

Mining Fuzzy Associate Rules and Response in IDS

作　　者：朱天清[1] 王先培[1] 熊平[1] 

机构地区：[1]武汉大学电子信息学院,武汉430079

出　　处：《计算机工程与应用》2004年第15期148-150,共3页Computer Engineering and Applications

摘　　要：文中阐述了模糊关联规则挖掘技术,提出了在模糊关联规则的挖掘中将事务属性模糊集作为单一属性来处理的方法。详细描述了在异常检测中应用模糊关联规则挖掘的具体步骤,并以网络流量分析为例,验证了在入侵检测中应用这一方法的可行性。最后提出了根据规则集相似度来建立入侵响应机制的方法。This paper describes the technology of mining fuzzy associate rules.An approach is presented that the fuzzy sets of each transaction's attributes are divided and calculated as separate attributes in mining fuzzy associate rules.The process of applying the approach in anomaly detection is discussed in detail.Using experiments on network traffic analysis,the feasibility of applying the mining fuzzy associate rules in intrusion detection is validated.Finally,the paper builds response mechanism according the similarity of rule sets.

关 键 词：异常检测 数据挖掘 模糊关联规则 

分 类 号：TP311[自动化与计算机技术—计算机软件与理论]