摘要： 网络攻击日益隐蔽化和复杂化,传统入侵检测方法对此有很大局限性,该文提出将入侵检测系统和SNMP网络管理系统相结合,根据攻击的本质特征,使用数据挖掘技术从SNMP的网络统计数据中获取检测规则的方法,能有效实现对隐蔽和复杂攻击的检测。

关键词: 简单网络管理协议, 数据挖掘, 入侵检测

Abstract: The network attacks become more and more ulterior and complicated which can deceive the traditional intrusion detection method. This paper discusses the application of data mining in intrusion detection, mining rules from SNMP data according to the essence of network attack. This method is efficient enough to meet the need of active detect complex intrusion.

中图分类号: 

• TP393.08