论文部分内容阅读
通过分析数据挖掘技术在入侵特征搜寻中的作用，提出了一个应用在基于网络和主机的混合模式入侵检测系统中的特征挖掘模型。该模型的特点是完全运用数据挖掘技术来建模，不仅对各种已知和未知入侵行为具有很好的辨别度，而且非常适合于现在流行的混合模式的入侵检测系统。
By analyzing the role of data mining in intrusion signature search, a feature mining model is proposed in the intrusion detection system based on network and host. The model is characterized by full use of data mining techniques to model, not only for a variety of known and unknown intrusion behavior with good discrimination, but also very suitable for the now popular mixed mode intrusion detection system.