Computer Engineering and Applications ›› 2009, Vol. 45 ›› Issue (2): 125-127.DOI: 10.3778/j.issn.1002-8331.2009.02.036

• 网络、通信、安全 • Previous Articles     Next Articles

Solution to getting inter-independent characters used to network intrusion detection system

SHI Guang1,3,HAO Ying2,LU Xiu-lin4,LIU Quan-fu4,XU Long-wei4,LEI Yu-guo4   

  1. 1.Graduate University of Chinese Academy of Sciences,Beijing 100083,China
    2.Beijing University of Civil Engineering and Architecture,Beijing 100044,China
    3.Department of Computer,North China Institute of Science and Technology,Beijing 101601,China
    4.Kongzhuang Mine,Shanghai Energy Co.,Ltd,Xuzhou,Jiangsu 221000,China
  • Received:2008-02-18 Revised:2008-04-28 Online:2009-01-11 Published:2009-01-11
  • Contact: SHI Guang

网络入侵检测系统中互相独立特征的求取方法

时 光1,3,郝 莹2,卢秀林4,刘全福4,徐龙伟4,雷玉国4   

  1. 1.中国科学院 研究生院,北京 100083
    2.北京建筑工程学院,北京 100044
    3.华北科技学院 计算机系,北京 101601
    4.上海能源股份有限公司 孔庄煤矿,江苏 徐州 221000
  • 通讯作者: 时 光

Abstract: To improve the reality,useful and whole performance of network Intrusion Detection System(IDS),the solution to get independent characters used to(or evidence) IDS is presented in the paper.The approach of auto-recognition of inter-relativity of the characters is developed,which is classification method for characters.The characters picked up by the method are used as the input of back propagate neural network.The characters are inter-independent,or weak relative.On the base of the chosen characters,an IDS is built.Tests show that the approach and IDS developed in the article is useful and available.It is conclusion that a set of inter-independent characters should be provided for IDS.The inter-relative degree of characters can be required by the method developed in the article.

Key words: Intrusion Detection System(IDS), inter-relativity of character, back propagate neural network

摘要: 为了提高网络入侵检测系统(IDS)的实时性、可用性以及整体性能,提出了一种自动识别特征相关性的方法(特征分类法)。用该方法提取出的互相独立(或相关性很小)的特征作为反向传播神经元网络的输入,以此为基础建立了一个IDS。实验证明该方法以及所建立的IDS效果较好。结论表明通过分类可以求得一组特征互相之间的相关程度,进一步可求得互相独立(或相关性很小)的特征。

关键词: 入侵检测系统, 特征相关性, 反向传播神经元网络