两种入侵检测系统D-S证据理论融合算法的比较  

The comparison of Two kind of fusion algorithm based on the D-S evidence theory in IDS

作　　者：何英[1] 韩元杰[1] 陈艳[1] 程丽芳[1] 

机构地区：[1]桂林电子科技大学计算机与控制学院,广西桂林541001

出　　处：《计算机安全》2008年第4期12-15,20,共5页Network & Computer Security

摘　　要：D-S证据理论可以支持概率推理、诊断、风险分析以及决策支持等,并在多传感器网络、医疗诊断等应用领域内得到了具体应用。该文比较了入侵检测中基于D-S证据理论的两种融合算法,通过DARPA1999评测数据集验证,得出各自的利弊,并提出了改进建议。The D-S evidence theory can support the probability inference, the diagnosis, the risk analysis as well as the policy-making support and so on . In the multi-sensor network, medical diagnosis and some other fields, it has obtained concrete application. This article compares two kind of fusion algorithm based on the D-S evidence theory in IDS, points out respective advantages and disadvantages according to the detection rate of 1999 DARPA IDS evaluation dataset, and puts forward the improvement proposal.

关 键 词：融合算法 D-S证据理论 入侵检测系统 

分 类 号：TP274.2[自动化与计算机技术—检测技术与自动化装置] TP393.08[自动化与计算机技术—控制科学与工程]