入侵检测论文：基于性约简的AODE入侵检测研究.docVIP

入侵检测论文：基于属性约简的AODE入侵检测研究 【中文摘要】随着计算机技术的飞速发展,信息网络已经成为社会发展的重要保证。然而,任何形式的网络服务都会导致安全方面的风险。网络安全是一个复杂的工程,单纯的被动防御是难以奏效的。入侵检测系统作为防火墙之后的第二道安全屏障,采用主动防御技术,已经成为计算机网络安全领域的重要研究课题。本文应用贝叶斯方法,对入侵检测进行研究。本文首先介绍了贝叶斯理论,然后用最简单的朴素贝叶斯分类器构建入侵检测模型；并在Weka平台上,通过实验验证了朴素贝叶斯分类器构建的入侵检测模型是简单且有效的。但是朴素贝叶斯分类器假设了各条件属性是相互独立的,这是实际情况下难于满足,这就会导致它的分类准确率有所下降。因此,本文提出了AODE分类器,它弱化了朴素贝叶斯分类器的条件独立性假设,通过在Weka平台上进行实验也证明了它比朴素贝叶斯分类器有着更高的分类准确率。在入侵检测系统中,数据的预处理也是十分重要的。不管是用朴素贝叶斯分类器还是用AODE分类器构建的入侵检测模型,都没有考虑到数据属性的冗余性；因此本文引入粗糙集理论进行属性约简,除去冗余属性。最后通过实验,验证了属性约简后的朴素贝叶斯分类器和AODE分类器都更加有效。 【英文摘要】With the rapid development of computer technology, information networks have become an important guarantee for social development. However, any form of network services will lead to security risks. Network security is a complex project, purely passive defense is ineffective. Intrusion detection system as the second safety barrier after the firewall, using of active defense technology, has become an important research topic in computer network security. In my paper, the Bayesian method has been used to research the intrusion detection.For the first, the paper introduces the Bayesian theory, and then uses the simplest naive Bayesian classifier builds intrusion detection model; and on the weka platform, validated by experiments naive Bayesian classifier built intrusion detection model is simple and effective. But the naive Bayesian classifier assumes that the condition attributes are mutually independent, it is difficult to meet the actual situation, which leads to its classification accuracy decreased. Therefore, the paper uses AODE classifier, which weakens the Naive Bayesian classifier assumes conditional independence. On the weak platform through experiment, AODE has been proved has the higher classification accuracy than the naive Bayesian classifier.In the intrusion detection system, the data pre-processing is also very important. Whether used the naive Bayesian classifier or the AODE classifier to build intrusion detection model, do not