计算机工程与应用 ›› 2007, Vol. 43 ›› Issue (25): 140-142.
• 网络、通信与安全 • 上一篇 下一篇
付庆利
收稿日期:
修回日期:
出版日期:
发布日期:
通讯作者:
FU Qing-li
Received:
Revised:
Online:
Published:
Contact:
摘要： 在大规模网络环境中，入侵检测系统得到的警报数据具有一定的规律。据此提出了一种基于警报事件强度的异常检测方法，采用分类样本空间和贝叶斯动态预测方法，解决了警报数据的时间效应问题。实验数据分析表明，该方法对于大规模入侵行为具有较好的检测效果。
关键词: 入侵检测, 警报, 分类样本空间, 贝叶斯动态预测
Abstract: Alert data are in certain regulation in large network environment.An anomaly detection method based on alert data is proposed in this paper.The time impact problem has been solved by using classified sample space and Bayesian dynamic forecast method.The simple experiment shows that this method can effectively detect large scale attacks.
Key words: intrusion detection, alert data, classified sample space, Bayesian dynamic forecast
付庆利. 基于分类样本和贝叶斯动态预测的异常入侵检测[J]. 计算机工程与应用, 2007, 43(25): 140-142.
FU Qing-li. Anomaly intrusion detection based on classified sample and Bayesian dynamic forecast [J]. Computer Engineering and Applications, 2007, 43(25): 140-142.
0 / 推荐
导出引用管理器 EndNote|Ris|BibTeX
链接本文: http://cea.ceaj.org/CN/
http://cea.ceaj.org/CN/Y2007/V43/I25/140
