| 基于数据挖掘的Snort增强模型的研究 |
| |
| 引用本文： | 李玲娟.基于数据挖掘的Snort增强模型的研究[J].南京邮电大学学报(自然科学版),2004,24(4):1-5. |
| |
| 作者姓名： | 李玲娟 |
| |
| 作者单位： | 南京邮电学院,计算机科学与技术系,江苏,南京,210003;苏州大学,计算机科学与技术学院,江苏,苏州,215006 |
| |
| 基金项目： | 江苏省教育厅自然科学研究专项基金(02SJD520002)资助项目 |
| |
| 摘 要： | Snort是一个简单而有效的基于规则的开源入侵检测系统,但有一定的局限性。论文提出了一个基于数据挖掘的Snort增强模型以采用各种数据挖掘技术来解决Snort的某些局限,还构建了基于案例推理(CBR)的应用实例,良好地验证了模型的正确性和灵活性,且由于"自适应"的特点,该模型还具有较强的可扩展性和交互性。
|
| 关 键 词： | 数据挖掘 Snort 入侵检测 |
| 文章编号： | 1000-1972(2004)04-0001-05 |
| 修稿时间： | 2004年3月11日 |
Research of the Data Mining Based Snort Enhanced Model |
| |
| LI Ling-juan.Research of the Data Mining Based Snort Enhanced Model[J].Journal of Nanjing University of Posts and Telecommunications,2004,24(4):1-5. |
| |
| Authors: | LI Ling-juan |
| |
| Institution: | LI Ling-juan1.Department of Computer Science and Technology,Nanjing University of Posts and Telecommunications,Nanjing 210003,China2.Computer Science & Technology School,Soochow University,Suzhou 215006,China |
| |
| Abstract: | The Snort is a simple and effective rule-based open source intrusion detection system.But it has some limitations.In this paper a data mining based Snort enhanced model is proposed to adopt data mining techniques to solve the limitations of the Snort.The accuracy and flexibility of the model are well verified by building a case based reasoning(CBR) application instance.The model is adaptive,so it also has scalabiliy and interactivity. |
| |
| Keywords: | Data mining Snort Intrusion detection |
| 本文献已被 CNKI 万方数据 等数据库收录！ |
|
