Optimization research on rule list in network intrusion detection system

Abstract

Abstract: In order to improve the detecting efficiency and reduce the rate of dropping packets of Network Intrusion Detection System（NIDS）, aiming at the existing problems of oversize RTN rule list and overlength average match length in the traditional rule list, by means of adding media type nodes, direction nodes and common OTN nodes to rule list, a thrice-decomposition method is proposed. This improvement can dramatically shorten the average match length of OTN nodes in NIDS. Various experimental results show that the improvement above can not only improve the detecting efficiency of NIDS, but also reduce the rate of dropping packets. More importantly, completeness of NIDS can be greatly promoted.

Key words: intrusion detection, rule list, media type nodes, direction nodes, common OTN nodes

摘要： 网络入侵检测系统在大流量下常出现较高的丢包率，针对该问题，从规则链表入手研究。针对传统链表中RTN链表过大、平均匹配长度过长的问题，提出通过增设多媒体类型结点、方向结点以及共性规则体结点对传统规则链表进行三次分解的方法来提高检测效率。通过三次分解后，系统对链表OTN结点的平均匹配长度大幅缩短。实验结果表明，使用该方法在提高网络入侵检测系统对多媒体数据检测效率的同时，还可有效降低丢包率，同时完备性也得到提高。

关键词: 入侵检测, 规则链表, 多媒体类型结点, 方向结点, 共性规则体结点

ZHAO Xu, WANG Wei, CHEN Liang. Optimization research on rule list in network intrusion detection system[J]. Computer Engineering and Applications, 2015, 51(20): 91-96.

赵旭，王伟，陈亮. 网络入侵检测系统规则链表的优化研究[J]. 计算机工程与应用, 2015, 51(20): 91-96.

[1]	WANG Zhendong, ZHANG Lin, LI Dahai. Survey of Intrusion Detection Systems for Internet of Things Based on Machine Learning [J]. Computer Engineering and Applications, 2021, 57(4): 18-27.
[2]	CAO Lei, LI Zhanbin, YANG Yongsheng, ZHAO Longfei. Intrusion Detection Method Based on Two-Layer Attention Networks [J]. Computer Engineering and Applications, 2021, 57(19): 142-149.
[3]	SHEN Shaoyu, CAI Manchun, LU Tianliang, ZHAO Qi. Intrusion Detection Algorithm based on LFKPCA-DWELM [J]. Computer Engineering and Applications, 2021, 57(17): 130-137.
[4]	GONG Junhui, HU Xiaohui, DU Yongwen. Research on Selection of Optimal Defense Strategy Based on Evolutionary Game [J]. Computer Engineering and Applications, 2021, 57(13): 116-123.
[5]	LI Jiayue, ZHAO Bo, LI Xiang, LIU Hui, LIU Yifan, ZOU Jianwen. Network Traffic Anomaly Prediction Method Based on Deep Learning [J]. Computer Engineering and Applications, 2020, 56(6): 39-50.
[6]	CHEN Hong, WANG Runting, XIAO Chenglong, GUO Pengfei, HUANG Jie, CHEN Honglin. Research on Intrusion Detection Model Based on DBN-XGBDT [J]. Computer Engineering and Applications, 2020, 56(22): 83-91.
[7]	DI Chong, LI Tong. Network Unknown Attack Detection with Deep Learning [J]. Computer Engineering and Applications, 2020, 56(22): 109-116.
[8]	WANG Pan, SONG Xuehua, WANG Changda, CHEN Feng, XU Xiaqiang, CAI Guanyu. Intrusion Detection Method Based on Improved Deep Belief Network [J]. Computer Engineering and Applications, 2020, 56(20): 87-92.
[9]	CHEN Hong, ZHAO Jianzhi, XIAO Chenglong, CHEN Jianhu, XIAO Yue. Research on Improved Intrusion Detection Model of ADASYN-SDA [J]. Computer Engineering and Applications, 2020, 56(2): 97-105.
[10]	YANG Yanrong, SONG Rongjie, ZHOU Zhaoyong. Network Intrusion Detection Method Based on GAN-PSO-ELM [J]. Computer Engineering and Applications, 2020, 56(12): 66-72.
[11]	WU Depeng, LIU Yi. Intrusion Detection Model Based on Self-Organizing Map of Variable Network Structure [J]. Computer Engineering and Applications, 2020, 56(12): 81-86.
[12]	LIU Yuefeng1, WANG Cheng1, ZHANG Yabin1, YUAN Jianghao2. Multiscale Convolutional CNN Model for Network Intrusion Detection [J]. Computer Engineering and Applications, 2019, 55(3): 90-95.
[13]	JIANG Xinlan, JIA Wenbo. Machine Vision Detection Method for Foreign Object Intrusion in High-Speed Rail Contact Net [J]. Computer Engineering and Applications, 2019, 55(22): 250-257.
[14]	MA Zhanfei1, YANG Jin2, JIN Yi2, BIAN Qi3. Network Intrusion Detection Method Based on IQPSO-IDE Algorithm [J]. Computer Engineering and Applications, 2019, 55(10): 115-120.
[15]	LIU Haiyan, ZHANG Yu, BI Jianquan, XING Meng. Review of technology based on distributed and collaborative network intrusion detection [J]. Computer Engineering and Applications, 2018, 54(8): 1-6.

Optimization research on rule list in network intrusion detection system

网络入侵检测系统规则链表的优化研究

PDF

Knowledge

Abstract

Cite this article

share this article

References

Related Articles 15

Recommended Articles

Metrics