电力信息网络入侵检测研究  

Research on intrusion detection of power information network

作　　者：王保义[1] 李峰[1] 

机构地区：[1]华北电力大学计算机科学与技术学院,河北保定071003

出　　处：《电力系统通信》2009年第9期14-17,共4页Telecommunications for Electric Power System

摘　　要：分析了电力信息网络安全结构及存在的入侵问题,提出将数据挖掘算法应用于电力信息网络的入侵检测。在入侵检测中使用关联规则分析算法,挖掘网络数据流中特征之间的关联关系。提出了一种针对网络入侵检测规则生成方法的AR_Tree算法,该算法解决了传统关联规则算法存在的多次扫描和无效规则问题。实验证明,此算法在规则生成和对网络入侵检测方面应用效果比传统算法优越,可以有效检测电力信息网络中的入侵行为。This paper analyses the security structure of power information network and the intrusion problems,presents the idea that data mining algorithm should be applied in intrusion detection of power information network.Association rule algorithm is applied into intrusion detection to find associated relation in network data stream.In addition a method aiming at network intrusion detection—AR_Tree algorithm is presented,which can solve the problem of frequent multi-scan and invalid rule in traditional association rules. This method is proved to be more efficient than traditional algorithm and can detect the intrusion in power information network effectively.

关 键 词：电力信息网络 网络安全 入侵检测 关联规则 AR_Tree算法 

分 类 号：TN915.853[电子电信—通信与信息系统]