两层入侵检测系统模型  

A Two-Layer Model of Intrusion Detection System

作　　者：郭学理[1] 刘婧[1] 何鹏[1] 

机构地区：[1]武汉大学计算机学院,湖北武汉430072

出　　处：《计算机应用研究》2003年第3期68-70,共3页Application Research of Computers

摘　　要：在剖析入侵检测系统(IDS)两种模型———误用检测(MisuseDetection,MD)和异常检测(AnomalyDetection,AD)的基础上,提出了一种两层的入侵检测分析模型,把基于聚类分析的异常检测模型和基于图的误用检测模型结合起来,融合了两种模型的优点,以达到更高的效率。This paper analyzed two kinds of analytical models:the misuse detection model and the anomaly detection model, and put forward a kind of twolayer model of intrusion detection system, which combined the merits of a kind of cluster based anomaly detection model and a graph based misuse detection model to improve the efficiency.

关 键 词：计算机网络 网络安全 网络资源 入侵检测系统 误用检测 异常检测 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]