摘要
简单介绍传统入侵检测系统,进而提出基于数据挖掘的分布式入侵检测系统模型,讨论了为了实现该模型所需要的数据挖掘技术。这些技术的应用,可以有效检测大规模协同攻击,提高分布式入侵检测系统的自适应性和可扩展性。
This paper introduces briefly the traditional intrusion detection system, then we propose a model of distributed intrusion detection system based on data mining, and elaborate technology of data mining to realize this model. By applying this technology, the concurrent attack of a large scale can be effectively detected and the adaptability and extensibility of distributed intrusion detection system will be improved.
出处
《电子工程师》
2005年第3期57-59,共3页
Electronic Engineer
关键词
分布式入侵检测系统
数据挖掘
网络安全
distributed intrusion detection system, data mining, network security
