摘要： 入侵检测系统必须在最小代价的情况下达到最大的安全效果。研究了入侵检测响应的高效模型。将入侵检测的代价分类,分别为损害代价、反应代价和执行代价,并在此基础上对各种入侵进行了分类;分析了这些代价因素的代价规则,建立了入侵检测代价平衡模型,对模型进行模拟分析,找出了代价最优的多规则库的模型。

关键词: 入侵检测, 代价平衡, 模型

Abstract: Intrusion detection systems (IDSs) must maximize the realization of security goals while minimizing costs. In this paper , cost-sensitive models are studied for intrusion detection. Firstly, the cost factors associated with IDSs including damage cost, response cost and operational cost, and intrusion types are defined according to them. Secondly , it finds the metrics of the costs and formulate the cost-sensitive models. At last , simulations are done to find the optimal models.

中图分类号: 

• TP393.08