一种基于模糊理论的自适应入侵检测方法  

An Adaptive Intrusion Detection Method Based on Fuzzy Theory

作　　者：令狐大智[1] 李陶深[1] 

机构地区：[1]广西大学计算机与电子信息学院,广西南宁530004

出　　处：《微电子学与计算机》2007年第9期36-38,共3页Microelectronics & Computer

基　　金：广西留学回国人员科学基金(桂科回0342001)

摘　　要：针对模糊转换过程中等价转换失真问题和网络记录中属性差异对入侵检测造成的影响,提出关键属性列表、属性作用度列表和属性类型列表等概念,将动态反馈机制引入入侵检测,提出一种基于模糊理论的自适应入侵检测方法。实验表明该方法能有效提高入侵检测系统的检测率,降低其误报率,增强计算机系统抵御入侵及自身免疫能力。In view of the influence of equivalent conversion distortion in fuzzy conversion process and difference in network records attribute, this paper puts forward such conception as the key attribute table, attributes effect degree and attribute types list, and bring the dynamic feedback mechanism into intrusion detection system, proposes an adaptive intrusion detection method based on the theory of fuzzy. The experimental results show that the method can effectively enhance the intrusion detection system detection rates and reduce their error rate, strengthen their immune system to resist the invasion.

关 键 词：入侵检测 模糊聚类 自反馈 自适应 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]