Abstract: The paper presents a break sequences analysis method for such situation and implements extracting the users normal behavior patterns by using sequential analysis in the network environment. Then it presents a support computing algorithm based on stack structure, which can count the candidate sequences by scanning the database only once. The tests show that the algorithm is practical.

Key words: Break sequences analysis, Intrusion detection, Stack structure

摘要： 提出了一种间断序列分析方法，实现了应用序列模式分析提取网络环境下用户正常行为模式。并在此基础上提出了基于栈结构的支持度计算算法，该算法仅对数据库进行一次扫描，即可实现候选序列的计数操作。实验证明该算法具有较好的实用性。

关键词: 间断序列分析, 入侵检测, 栈结构

CLC Number: 

• TP311