基于贝叶斯分类算法的网络入侵行为检测方法  

Network Intrusion Detection Method Based on Bayesian Classification Algorithm

作　　者：何新洲[1] HE Xinzhou(Data and Information School,ChangjianGPolytechnic,Wuhan 430074,China)

机构地区：[1]长江职业学院数据信息学院,湖北武汉430074

出　　处：《微型电脑应用》2020年第10期28-31,共4页Microcomputer Applications

基　　金：2017年湖北高校省级教学研究项目“高职计算机网络技术专业现代学徒制人才培养模式研究”阶段性研究成果(2017594)。

摘　　要：传统的网络入侵行为检测方法检测时间长、检测率低,导致网络安全受到严重威胁,因此基于贝叶斯分类算法对网络入侵行为检测方法进行研究。首先设计用户行为日志采集系统,通过采集节点模块、数据分析与存储模块对用户行为日志数据进行采集,其次通过消除冗余数据、数据规范化等环节预处理采集到的数据。针对预处理后的数据,构建基于朴素贝叶斯分类的网络入侵行为检测模型,基于不同的属性集构建非网络入侵与网络入侵分类规则,实现网络入侵行为检测。实验结果显示该方法检测结果准确度在97%以上,检测过程花费时间与对比方法相比降低4 s以上。The traditional network intrusion detection method has a long detection time and low detection rate,which leads to a serious threat to the network security.This paper studies the network intrusion detection method based on Bayesian classification algorithm.Firstly,the user behavior log collection system is designed,itcollects the user behavior log data through the collection node module,data analysis and storage module,and then preprocesses the collected data by eliminating redundant data and data normalization.According to the preprocessed data,the network intrusion detection model based on naive Bayesian classification is constructed,and the non network intrusion and network intrusion classification rules based on different attribute sets are constructed to realize the network intrusion detection.The experimental results show that the accuracy of the method is more than 97%,and the detection process takes more than 4 s less time than the comparison method.

关 键 词：贝叶斯分类 网络入侵 行为检测 行为日志 属性 分类规则 卡方检验法 

分 类 号：TP393[自动化与计算机技术—计算机应用技术]