摘要： 采用列联表表示特定阈值下入侵检测系统(IDS)的性能，使用ROC曲线对不同阈值下IDS的总体性能进行评估。在实际应用中，基于样本数据集，通过计算几何的方式得到ROC凸包曲线(ROCCH)。为降低ROCCH的计算复杂度，在曲线下面积(AUC)最大似然估计的条件下，通过保序回归得到最大似然估计ROC曲线(MLE-ROC)算法。实验表明，MLE-ROC算法在降低计算复杂度的同时提高了AUC的近似程度。

关键词: 入侵检测系统, 列联表, 最大似然估计ROC凸包曲线, 保序回归

Abstract: The measures of Intrusion Detection System(IDS) in special threshold-value are derived from the contingency table. ROC curve facilitates to evaluate general performance of IDS. In practice, ROC Convex Hull(ROCCH) method which combines techniques from computational geometry is used. In order to low computational complexity, the algorithm of MLE-ROC which depending on monotonic regression under maximum likelihood estimation of value of Area-Under-Curve(AUC) is proposed. Experimental results show that the proposed algorithm is computationally efficient while having better AUC approximation level.

Key words: Intrusion Detection System(IDS), contingency table, MLE-ROCCH, monotonic regression

中图分类号: 

• TP301.06