基于数据的挖掘入侵检测技术

• 作 者: 张克曦 贺建飙
• 机 构: 中南大学信息学院,
• 出 处: 科技信息(学术研究)
• 发表日期: 2008年24期
• 关键词: 入侵检测 数据挖掘 网络安全

入侵检测技术是一种保护网络免受黑客攻击的网络安全技术。它是继防火墙,数据加密等传统安全保护措施之后的新一代网络安全保障技术。为了更有效的适应网络计算模式的发展与挑战,在精确性、可扩展性、适应性方面进行改进,将数据挖掘的思想应用于入侵检测。本文分析了将数据挖掘技术运用到入侵检测系统的体系结构,研究方法及存在的问题。

Intrusion detection technology is a network security technology to protect the network from hackers. It is a new generation of network security technology after traditional security measures such as firewall and data encryption. In order to adapt to the development and challenge of the network computing model more effectively, it improves the accuracy, scalability and adaptability and applies the idea of ​​data mining to intrusion detection. This article analyzes the data mining technology applied to the intrusion detection system architecture, research methods and problems.