一种基于模糊关联规则挖掘的攻击识别系统  

System for attack recognition based on mining fuzzy association rules

作　　者：朱可[1] 胡克瑾[1] 

机构地区：[1]同济大学经济与管理学院,上海200092

出　　处：《计算机工程与应用》2007年第1期135-138,共4页Computer Engineering and Applications

摘　　要：降低攻击识别中的漏报率和误报率是现在一个急需解决的问题。论文分析了攻击识别的需求与模糊关联规则挖掘的有关概念,并且以此为基础构建了一个攻击识别系统。该系统不但能够很好地满足攻击识别的要求,而且还能同时对异常攻击和滥用攻击进行识别,并且在很大程度上降低了攻击识别中的漏报率和误报率,极大地增强了信息系统的生存力。It is an imperative issue that reduces the false negative rate and false positive rate in attack recognition.This literature analyses the requirements for attack recognition and the relevant concepts about the mining of fuzzy association rules,and then sets up a system for attack recognition.This system not only satisfies the requirements for attack recognition perfectly,but also recognizes the anomaly-based attacks and the misuse-based attacks simultaneously.Furthermore,it reduces the false negative rate and false positive rate in attack recognition in some extents and greatly enhances the survivability of the information systems.

关 键 词：攻击识别 模糊关联规则 模糊逻辑 

分 类 号：TP18[自动化与计算机技术—控制理论与控制工程] TP309[自动化与计算机技术—控制科学与工程]