一种新颖的误用入侵检测自适应模型  

Novel Misuse Intrusion Detection Model with Self-Adaptability

作　　者：史志才[1] 刘喆姝[2] 

机构地区：[1]上海工程技术大学电子电气工程学院,上海201620 [2]上海工程技术大学图书馆,上海201620

出　　处：《上海工程技术大学学报》2007年第4期301-304,共4页Journal of Shanghai University of Engineering Science

基　　金：上海工程技术大学科研启动资助项目(校启07-22)

摘　　要：针对目前入侵检测系统漏报率高、自适应能力差等问题,通过引入规则集的完备度、自相似度等概念,采用模糊模式识别方法,构造一种新颖的误用入侵检测自适应模型,使入侵检测系统能够根据自身的学习情况自动调节异常和正常的判断准则,从而有效降低系统的漏报率,增强系统的自适应能力,提高检测的准确度。In order to reduce the false negative rate and improve bad self-adaptability of intrusion detection systems the concepts of completeness degree and self-similarity of the rule set were defined. A novel misuse intrusion detection model with self-adaptability was proposed. The model makes use of fuzzy pattern recognition technique. The intrusion detection system based on the model can adjust its threshold to identify abnormal or normal behaviors according to its evolving knowledge. Hence the false negative rate of intrusion detection systems is reduced. Its accuracy and self-adaptability is improved.

关 键 词：计算机网络 入侵检测 信息安全 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]