数据挖掘技术在蜜网中应用研究  

Research on Data Mining in Honeynet

作　　者：李巧君[1] 鲁华栋[1] 

机构地区：[1]河南工业职业技术学院计算机工程系,南阳473009

出　　处：《计算机系统应用》2014年第6期241-245,共5页Computer Systems & Applications

摘　　要：部署蜜网(Honeynet)的目的之一就是收集数据,但若无法对捕获的数据进行分析处理,则该数据就毫无意义.本文对蜜网中捕获的日志模块数据利用数据挖掘技术进行标记分类,使用分类算法对已经分好类的数据进行有规则的挖掘,从而发现入侵者的攻击方法,为未来各种攻击行为做好防御准备.Collecting data areone of the aims of Honeynet, But how to analyze these collected data is the keypoint. Data mining is introduced to mark and sort the log module data prayed in Honeynet. And the sorted data were mined regularly with sort algorithm. By means of that, the attack method could be found, and good defense ways for varies attack manners would be deployed,Collecting data is one of the aims of Honeynet.

关 键 词：数据挖掘 K-MEANS算法 日志模块数据 HONEYNET 

分 类 号：TP311.13[自动化与计算机技术—计算机软件与理论]