入侵检测技术中Apriori算法的应用与改进  

Application and Improvement of Apriori Algorithm in Intrusion Detection Technology

作　　者：刘君玲[1] 

机构地区：[1]吉林工程技术师范学院信息工程学院,吉林长春130052

出　　处：《吉林工程技术师范学院学报》2008年第8期62-65,共4页Journal of Jilin Engineering Normal University

基　　金：吉林工程技术师范学院科研项目(2006)

摘　　要：采用关联规则挖掘网络数据包可以发现数据包中各属性字段间的频繁关系,通过模式的学习与训练可以发现网络用户的异常行为模式。采用作用度的Apriori-lift算法削减了Apriori算法的挖掘结果规则,使网络入侵检测系统可以快速的发现用户的行为模式,而且能够快速的锁定攻击者。Apriori-lift算法提高了基于关联规则的入侵检测系统的检测性能。It can find a model among all kinds of fields of packet in association rules mining network packets. Abnormal behavior of network user can be finded by studying and training of model. Lift is adopted in Apriori - lift algorithm cuts roles of result in apriori algorithm mining, which let NIDS not only find the model of network user but also lock the attacker quickly. Liftapriori algorithm greatly increase the performance of Association Rules - based Network Intrusion Detection System.

关 键 词：网络安全 入侵检测 关联分析 APRIORI 

分 类 号：G434[文化科学—教育学]