Author Login Editor-in-Chief Peer Review Editor Work Office Work

Computer Engineering ›› 2006, Vol. 32 ›› Issue (16): 133-135. doi: 10.3969/j.issn.1000-3428.2006.16.050

• Security Technology • Previous Articles     Next Articles

Network Intrusion Detection Method Based on Rough Set Theory

CHEN Weitong1,2; QIAN Yuntao1,2   

  1. 1. College of Computer Science, Zhejiang University, Hangzhou 310027; 2. State Key Laboratory of Information Security(Graduate School of Chinese Academy of Sciences), Beijing 100039
  • Received:1900-01-01 Revised:1900-01-01 Online:2006-08-20 Published:2006-08-20

基于粗糙集理论的网络入侵检测方法

陈伟统1,2;钱沄涛1,2   

  1. 1. 浙江大学计算机学院,杭州 310027;2. 信息安全国家重点实验室(中国科学院研究生院),北京 100039

Abstract: This paper presents a network intrusion detection method based on rough set theory, and uses a hybrid method with genetic algorithm to find a possibly short reduct which can reduce computing time. The result of the experiment shows that this model has high detection rate and low false reject rate in detecting DoS and probe attacks, and performs well in detecting R2L and U2R attacks either.

Key words: Rough set theory, Intrusion detection, Genetic algorithm, Heuristic algorithm

摘要: 提出了基于粗糙集理论的网络入侵检测方法,应用混合遗传算法求解粗糙集的约简,减少了计算时间。实验结果表明,该方法对DoS和Probe攻击具有很高的检测率和较低的误检率,并且对U2R和R2L攻击也有较好的检测率。

关键词: Rough Set理论, 入侵检测, 遗传算法, 启发式算法