Abstract: Exactly expressing and analyzing intrusion information is the core of intrusion detection system. This paper analyzes correlative detection and characters of network intrusion, gives a layered knowledge express method and quantification method. This paper also gives a correlative arithmetic of network intrusion detection on the basis of these methods.

摘要： 正确表示和分析入侵信息,并能有效地识别入侵是入侵检测系统的核心。分析了关联检测和网络入侵特征,给出了入侵检测的分层知识表示和量化方法,并在此基础上提出了网络入侵检测的关联算法。

关键词: 网络, 入侵检测, 关联检测, 特征, 知识表示, 算法

CLC Number: 

• TP393.08