数据挖掘的船舶通信网络非法入侵智能检测方法  

Intelligent detection method of illegal intrusion in ship communication network based on data mining

作　　者：谭韶生 夏旭[3] TAN Shao-sheng;XIA Xu(Central South University,Changsha 410007,China;Hunan Industry Polytechnic,Changsha 410208,China;Hunan Vocational Institute of safety Technology,Changsha 410151,China)

机构地区：[1]中南大学,湖南长沙410007 [2]湖南工业职业技术学院,湖南长沙410208 [3]湖南安全技术职业学院,湖南长沙410151

出　　处：《舰船科学技术》2022年第17期144-147,共4页Ship Science and Technology

基　　金：湖南省社会科学成果评审委员会课题(XSP20YBC417);湖南省职业院校教育教学改革研究项目(ZJGB2019021);湖南省教育厅科学研究项目(18C1333)。

摘　　要：以降低船舶通信网络非法入侵检测过程中的误警为目的,提出基于数据挖掘的船舶通信网络非法入侵智能检测方法。采用船舶通信网络用户历史数据,构建基于非法入侵行为分类规则与用户行为规则的知识库;采用关联规则挖掘船舶通信网络用户实时数据,将所得新规则与旧规则对比,更新知识库;检测响应过程依照知识库对船舶通信网络用户实时数据实行非法入侵检测判定,并根据判定结果给予警报响应。实验结果显示该方法可有效实现非法入侵检测与警报响应功能,同时各非法入侵类别检测精度达到97%以上。In order to reduce the false alarm in the process of illegal intrusion detection in ship communication network,an intelligent detection method of illegal intrusion in ship communication network based on data mining is proposed. The knowledge base based on the classification rules of illegal intrusion and the rules of user behavior is constructed by using the historical data of users in the ship communication network;The association rules are used to mine the real-time data of ship communication network users, and the new rules are compared with the old rules to update the knowledge base;The detection and response process carries out illegal intrusion detection and judgment on the real-time data of ship communication network users according to the knowledge base, and gives an alarm response according to the judgment results. The experimental results show that this method can effectively realize the function of illegal intrusion detection and alarm response, and the detection accuracy of each illegal intrusion category can reach more than 97%.

关 键 词：数据挖掘 船舶通信网络 非法入侵 检测 关联规则 贝叶斯分类 

分 类 号：TP393[自动化与计算机技术—计算机应用技术]