基于模糊决策树的入侵检测规则生成技术  

Technology of Producing Intrusion Rules Based of Fuzzy Decision Tree

作　　者：王雷[1] 王芳[1] 么炜[1] 程洪[1] 李志平[2] 

机构地区：[1]河北农业大学信息科学与技术学院,河北保定071001 [2]河北大学数学与计算机学院,河北保定071002

出　　处：《河北大学学报（自然科学版）》2008年第4期438-442,共5页Journal of Hebei University(Natural Science Edition)

摘　　要：针对计算机免疫系统模型GECISM中的类MC Agent,利用模糊决策树Fuzzy-Id3算法并使用应用程序中的系统调用作为数据集构造决策树,从而生成计算机免疫系统中的入侵检测规则,并与C4.5算法生成规则进行了对比分析,利用Fuzzy-Id3算法方法生成的规则对未知数据集进行分类有较低的误报率和漏报率.On the base of MC Agent which kind of General computer Immune System Model, this paper make use of fuzzy decision tree Fuzzy-Id3 algorithm to construct fuzzy decision tree, which the data set uses in the system call of the application procedure. Thus in the production intrusion detection rules of computer immune system, and has carried on the contrastive analysis with the CA. 5 algorithm generative rule, carries on the classification using the Fuzzy-Id3 algorithmic method production＇s rule to the unknown data set to have the low rate of false and the rate of missing report.

关 键 词：入侵检测 计算机免疫系统 系统调用 Fuzzy-Id3算法 规则 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]