摘要： 网络入侵检测中的流量异常检测方法存在着虚警率较高的问题，为此提出了结合环境重现的非稳态流量异常检测系统。该系统采取了基于发生新事件的先验概率和趋势来评估异常的思想，建立非稳态正常模型，采用环境重现进行进一步数据挖掘，最后给出了综合系统的原型设计。

关键词: 入侵检测, 异常检测, 非稳态, 虚警率, 环境重现

Abstract: In order to solve the problem of high rate of false alarms that lies in the network traffic anomaly detection method of network intrusion detection, it is raised a system of environmental re-appearing and nonstationary model. The system adopts the idea of evaluating the degree of anomaly based on the pre-possibility of the occurrence of new events and the trend. It builds nonstationary models. From that, it goes further to dig the information of the date by environmental re-appearing. Finally, the design of the prototype of the synthesis system is created.

中图分类号: 

• TP393.08