基于模糊关联规则挖掘的网络入侵检测研究  

Study on the Network Intrusion Detection Based on Fuzzy Association Rule Mining

作　　者：魏念忠[1] 

机构地区：[1]泰山学院信息科学技术系,山东泰安271021

出　　处：《微电子学与计算机》2008年第9期188-189,192,共3页Microelectronics & Computer

摘　　要：提出评价入侵检测系统的五个指标,给出了有效性和效率两个参数.然后重点探讨了模糊关联规则在网络入侵检测中的应用,对传统的支持度和置信度概念根据网络入侵检测的特点进行了改进,给出了算法的具体步骤.通过一个实例,与经典的Apriori算法进行对比分析,实验结果表明,用模糊关联规对海量网络日志数据库进行挖掘是一种可行的方法.In this paper, five evaluation indexes are proposed first, as well as two factors of efficiency. The traditional supporting degree and confidence degree are improved to change the classic rule mining algorithm. The steps of fuzzy rule mining algorithm are given. Then an example is run to contract two algorithms. The result is that the fuzzy rule mining algorithm is more convenient than Apriori algorithm to mine mass network log database.

关 键 词：数据挖掘 关联规则 入侵检测 算法 

分 类 号：TP393[自动化与计算机技术—计算机应用技术]