基于小波变换的入侵检测方法

入侵检测是保护信息系统安全的重要途径,作为一种新的动态安全防御技术,它是继防火墙之后的第二道安全防线.入侵检测的关键是采用何种检测方法来有效地提取特征数据并准确分析出非正常网络行为.利用小波变换自适应的时频局部化分析方法,可以由粗及精的逐步观察信号,从中发现网络流量的一些隐藏的细节.通过对实际流量的分析,表明小波技术可以有效的揭示出周围环境和异常流量的细节特征,检测出异常.

Intrusion Detection Method Based on Wavelet Transform

Intrusion detection plays an important role in protecting information system security. It is, as a new dynamical security defense technique, the second line of defense after firewall. The main issue in this area is using a proper detection method to pick up and analyze the information which contains abnormal network behavior characteristic. The method of analyzing the self-adaptive time-frequency localization of the wavelet transform, can organizes the data into strata, a hierarchy of component signal. Through examining the various derived signals of the decomposition to infer whether the anomaly occurs from the hierarchy of the signal, it turns out that wavelet tool is quite effective at exposing the details of both ambient and anomalous traffic.