作者投稿和查稿 主编审稿 专家审稿 编委审稿 远程编辑

计算机工程 ›› 2006, Vol. 32 ›› Issue (16): 133-135. doi: 10.3969/j.issn.1000-3428.2006.16.050

• 安全技术 • 上一篇    下一篇

基于粗糙集理论的网络入侵检测方法

陈伟统1,2;钱沄涛1,2   

  1. 1. 浙江大学计算机学院,杭州 310027;2. 信息安全国家重点实验室(中国科学院研究生院),北京 100039
  • 收稿日期:1900-01-01 修回日期:1900-01-01 出版日期:2006-08-20 发布日期:2006-08-20

Network Intrusion Detection Method Based on Rough Set Theory

CHEN Weitong1,2; QIAN Yuntao1,2   

  1. 1. College of Computer Science, Zhejiang University, Hangzhou 310027; 2. State Key Laboratory of Information Security(Graduate School of Chinese Academy of Sciences), Beijing 100039
  • Received:1900-01-01 Revised:1900-01-01 Online:2006-08-20 Published:2006-08-20

摘要: 提出了基于粗糙集理论的网络入侵检测方法,应用混合遗传算法求解粗糙集的约简,减少了计算时间。实验结果表明,该方法对DoS和Probe攻击具有很高的检测率和较低的误检率,并且对U2R和R2L攻击也有较好的检测率。

关键词: Rough Set理论, 入侵检测, 遗传算法, 启发式算法

Abstract: This paper presents a network intrusion detection method based on rough set theory, and uses a hybrid method with genetic algorithm to find a possibly short reduct which can reduce computing time. The result of the experiment shows that this model has high detection rate and low false reject rate in detecting DoS and probe attacks, and performs well in detecting R2L and U2R attacks either.

Key words: Rough set theory, Intrusion detection, Genetic algorithm, Heuristic algorithm