关键词: 攻击识别, 模糊关联规则, 模糊逻辑

Abstract: It is an imperative issue that reduces the false negative rate and false positive rate in attack recognition. This literature analyses the requirements for attack recognition and the relevant concepts about the mining of fuzzy association rules, and then sets up a system for attack recognition. This system not only satisfies the requirements for attack recognition perfectly, but also recognizes the anomaly-based attacks and the misuse-based attacks simultaneously. Furthermore, it reduces the false negative rate and false positive rate in attack recognition in some extents and greatly enhances the survivability of the information systems.

Key words: Attack Recognition, Fuzzy Association Rules, Fuzzy Logic