一种不定长特征模式入侵检测模型及仿真分析

针对定长序列模式在刻画序列特征方面的不足,提出了一种不定长序列特征模式抽取算法,并以此为基础设计了一个新的入侵检测模型。模型引入了状态转移概念并将模式匹配检测和状态转移检测结合在一起,克服了已有模型只专注于单一特征检测的缺陷。实验证实,和单特征检测相比,该模型在保证检测率的同时降低了误报率,并且检测算法的效率也是可接受的。

Intrusion Detection Model Based on Variable-lengthCharacter Patterns and Its Simulating Analysis

An algorithm of drawing out variable-length character patterns was proposed due to the limitations of invariable-length character patterns, and based on which a new intrusion detection model was designed. The model introduced state shift concept and inosculated pattern match detection and state shift detection, which overcame the shortcoming that other models detected only using single character. The experiments show that the model detection results are satisfied, and the efficiency of algorithm is acceptable.