基于关联规则的网络及主机混合型入侵检测研究-计算机技术专业论文.docxVIP

数据集的入侵场景描述完全一致，入侵检测分析取得了较好的效果。关键词：关联规则网络与主机混合入侵检测数据挖掘 数据集的入侵场景描述完全一致，入侵检测分析取得了较好的效果。 关键词：关联规则网络与主机混合入侵检测数据挖掘 万方数据 RESEARCH RESEARCH ON DETECTIoN OF HYBIUD INTRUSIoN INTo NETWoRK AND HoST BASED ON ASSoCIATIoN RULES ABSTRACT The rapid development of information technology also brings network security threats associated many other issues．In practical work，system administrators face a lot of intrusion detection alarms and a host audit logs have no idea，a single form of intrusion detection system itself is sinking in how to minimize false positives on the basis of satisfactory detection rate，while commercial deployment of distributed hybrid intrusion detection systems，or so—called security management center,input—output ratio is very small，the general unit unbearable． In response to this embarrassing situation，In this paper,based on the study of the current intrusion detection technology and association analysis mining， we propose a Hnd of network and host hybrid architecture intrusion detection analysis based on association rules．In response to this architecture，This paper mainly work in the following two aspects． (1)This paper describes the background，significance and research status of this paper,and the development process of intrusion detection，intrusion detection systems architecture，etc．，and from the perspective of detection methods and data sources，described the different types of intrusion detection systems and it’S common technique． 万方数据 (2)This (2)This paper gives the architecture of the network and host intrusion detection analysis based on association rules，as well as functions and processes related modules，and association analysis algorithms used are introduced．In order to test and evaluate the effectiveness of applied data mining to network and host intrusion detection analysis based on association rules，This paper use MIT Lincoln Laboratory experiments dataset，combined with the dataset intrusion scenario，the experimental results were veri