• 中国计算机学会会刊
  • 中国科技核心期刊
  • 中文核心期刊

J4 ›› 2012, Vol. 34 ›› Issue (11): 68-71.

• 论文 • 上一篇    下一篇

序列模式挖掘在入侵检测中的应用研究

李亮   

  1. (宿迁学院网络中心,江苏 宿迁 223800)
  • 收稿日期:2011-10-17 修回日期:2011-12-25 出版日期:2012-11-25 发布日期:2012-11-25

Research on Sequential Pattern Mining in Intrusion Detection System

LI Liang   

  1. (Network Center,Suqian College,Suqian 223800,China)
  • Received:2011-10-17 Revised:2011-12-25 Online:2012-11-25 Published:2012-11-25

摘要:

入侵检测系统是计算机安全体系中的一个重要构成要素,随着网络数据流量的不断增大,与数据挖掘相结合的入侵检测系统成为了研究热点。本文针对计算机入侵检测中网络安全审计数据的特点,提出了一个改进的PrefixSpan 算法,并通过检测一个网络审计记录的实验,进行了结果分析。

关键词: 入侵检测, 数据挖掘, 序列模式, PrefixSpan算法

Abstract:

The Intrusion Detection System (IDS, Intrusion Detection System) is an important component of the computer security architecture. With the increasing data flow of network, the intrusion detection system that is combined with the data mining has become a research hotspot. An improved PrefixSpan algorithm based on time constraints and attributerelative is developed to fit into the network audit data of computer intrusion detection. The experiment of dealing with a computer network audit database gives the application and result analysis of the algorithm.

Key words: intrusion detection;data mining;sequential pattern; Prefixspan algorithm