摘要： 入侵检测系统是一种检测网络入侵行为的工具。然而现在的入侵检测系统内部的知识库中的入侵模式（正常模式和异常模式）往往不能很好地反应入侵行为的特征，所以有时候经常出现漏报或误报的情况。另外，系统提取的用户行为特征有时候也不能正确地反映用户的实际行为特征。针对这一情况，详细讨论了数据挖掘技术在入侵检测系统中的应用，提出了采用数据挖掘技术的入侵检测系统的结构模型。

关键词: 入侵检测系统, 数据挖掘, 入侵模式

Abstract: IDS（Intrusion Detection System）is a tool which is used to detect the intrusions to network system . However , the intrusion model of the current IDS often can't reflect the intrusion characteristics well ,so the mistakes and omissions of alarm often emerge . Moreover , sometimes the extraction of the user's behavior data can't reflect the real characteristics of the user operation, too .To solve this question ,the application of the DM technology in IDS is discussed , and the structure of the IDS with the application of DM technology is presented.

中图分类号: 

• TP393.08