A privilege flow oriented intrusion detection method based on HSMM (Hidden semi-Markov Model) is discussed. The privilege flow model and HSMM are incorporated in the implementation of an anomaly detection IDS (Intrusi...A privilege flow oriented intrusion detection method based on HSMM (Hidden semi-Markov Model) is discussed. The privilege flow model and HSMM are incorporated in the implementation of an anomaly detection IDS (Intrusion Detection System). Using the dataset of DARPA 1998, our experiment results reveal good detection performance and acceptable computation cost.展开更多
Ad hoc网络由于采用无线信道、有限的电源和带宽、分布式控制等,会比有线网络更易受到入侵攻击。通常的入侵检测技术具有检测能力单一、缺乏对抗新入侵方式的能力等缺陷。在分布式入侵检测系统(IDS)的基础上,提出一种针对移动节点网络...Ad hoc网络由于采用无线信道、有限的电源和带宽、分布式控制等,会比有线网络更易受到入侵攻击。通常的入侵检测技术具有检测能力单一、缺乏对抗新入侵方式的能力等缺陷。在分布式入侵检测系统(IDS)的基础上,提出一种针对移动节点网络行为的异常检测机制。基于多层综合的观测值序列,采用隐半马尔可夫模型(HSMM)建立描述网络中合法节点正常行为的检测模型,继而对网络中的正常与异常行为进行判断与识别。实验表明,此方法能针对现有多种入侵方式进行有效的检测。展开更多
文摘A privilege flow oriented intrusion detection method based on HSMM (Hidden semi-Markov Model) is discussed. The privilege flow model and HSMM are incorporated in the implementation of an anomaly detection IDS (Intrusion Detection System). Using the dataset of DARPA 1998, our experiment results reveal good detection performance and acceptable computation cost.
