摘要： 针对入侵检测系统中安全规则提取的困难,该文提出了利用粗集方法从系统日志审计信息中挖掘安全规则,并给出了规则挖掘算法。通过KDDCUP1999入侵数据测试集中的数据验证了该方法的有效性和可行性,为入侵检测中安全规则的提取提供了一种新方法。
关键词:
网络安全,
入侵检测,
粗集方法,
数据挖掘
Abstract: Allowing for troubles of mining security rules from IDS, a algorithm for mining security rules from system log audit information basedon rough set is presented. The validity and feasibility of the algorithm is proved by the experiment using intrusion data set of KDD CUP 1999. It canprovide a new method for extracting security rules from IDS.
中图分类号:
武志峰,陈冬霞,吉根林. 基于粗集方法入侵检测系统中的安全规则的挖掘[J]. , 2005, 31(12): 100-.
WU Zhifeng1,2, CHEN Dongxia1, JI Genlin1. Security Rules Mining from IDS Based on Rough Set[J]. , 2005, 31(12): 100-.