模糊技术在入侵检测系统中的应用研究综述  

Survey of the Application Research of Fuzzy Technology to Intrusion Detection Systems

作　　者：孙知信[1] 徐红霞[1] 

机构地区：[1]南京邮电大学计算机学院,江苏南京210003

出　　处：《南京邮电大学学报（自然科学版）》2006年第4期73-78,共6页Journal of Nanjing University of Posts and Telecommunications：Natural Science Edition

基　　金：教育部留学回国人员科研启动基金;南京市留学回国人员科技活动择优资助经费;华为基金(YJB2005027NP)资助项目

摘　　要：网络安全其本身就是一个模糊的概念,把模糊技术引入入侵检测系统中是改善入侵检测系统性能的一个新尝试。文中首先从数据挖掘和特征提取、基于模糊推理的数据分析、模糊规则库的自适应性更新以及支持响应回卷的模糊默认逻辑推理的应用等几个方面探讨了国内外模糊技术在该领域中的研究成果,并在此基础上进一步分析了目前模糊入侵检测发展中的不足和将来的发展方向。The network security is considered as a fuzzy conception. It is a fresh tentative in improving the performance of IDS to introduce the fuzzy technology into intrusion detection system （IDS）. We discuss the existing achievement in this area in China and abroad covering such aspects as data mining and feature extraction, data analysis based on fuzzy reasoning, adaptive update of fuzzy rule library and the application of fuzzy default logic reasoning which supports response rollback. Furthermore, we analyze the deficiency of the current fuzzy intrusion detection and predict its future direction.

关 键 词：模糊逻辑 模糊推理 模糊入侵检测 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]