决策树算法在入侵检测中的应用分析及改进  

Analysis and improve application of decision tree mathematic in intrusion detection systems

作　　者：刘莘[1] 张永平[1] 万艳丽[1] 

机构地区：[1]中国矿业大学计算机科学与技术学院,江苏徐州221008

出　　处：《计算机工程与设计》2006年第19期3641-3643,共3页Computer Engineering and Design

摘　　要：对入侵检测的现状进行了分析,并以决策树方法为例子,介绍了数据挖掘技术在入侵检测中的应用。在对C4.5算法的基本流程进行描述的基础上,结合入侵检测中获取的数据集,利用C4.5算法实现对数据的分类,并进行了规则的提取,结合数据结构中查找算法的思想对加快规则库匹配方法上提出了改进意见。对决策树方法今后将会面临的问题进行了分析和阐述,并指明了今后的研究方向。The condition of intrusion detection systems is analyzed with the example of decision tree mathematic, the application of data mining in intrusion detection is introduced. Based on the describing the basic process ofC4.5 mathematic, using C4.5 mathematic classify the date is acquired from the intrusion detection. Above all, according to the lookup mathematic in data structure, some progressive ideas is advanced to improve the rule database＇s matching speed. Finally, the future questions that will be aced by the decision tree is expounded the future research aspect is pointed out.

关 键 词：入侵检测 数据挖掘 决策树 C4.5 规则库 数据结构 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]