摘要： 针对计算机入侵检测中网络安全审计数据的特点，提出一个改进的PrefixSpan算法，引入时间约束和属性相关的特征指导挖掘，应用M矩阵和Apriori特性减少投影数据库的数量，并缩减投影数据库规模，提高了序列模式挖掘的效率和有用性。通过检测一个网络审计记录的实验，进行结果分析。

关键词: 序列模式挖掘, PrefixSpan算法, 入侵检测

Abstract: An improved PrefixSpan algorithm based on time constraints and attribute-relative is developed to fit into the network audit data of computer intrusion detection. The algorithm applies the triangular matrix M to reduce the number of projected databases and the Apriori checking to reduce the size of projected databases. It enhances effectiveness and usefulness of sequential patterns mining. The experiment of dealing with a computer network audit database gives the application and result analysis of the algorithm.

Key words: sequential patterns mining, PrefixSpan algorithm, intrusion detection

中图分类号: 

• TP393