基于关联规则的入侵检测算法研究综述

摘要

The association rules and its characteristics are described, including the classic Apriori algorithm and its improved algorithms.Association rules based on fuzzy sets, concept lattice, rough sets, genetic algorithms, weighted and directed graph algorithms are reviewed. Aimed at the shortcomings of intrusion detection algorithms and its applications, analysis and improvements are realized from high false alarm rate and omission rate, low detection rate and matching efficiency of intrusion detection. Finally, hot issues for further research and trends in this area are pointed out.%介绍了关联规则及其特点,并对经典Apriori算法及其改进算法做了描述.对基于关联规则的模糊集、概念格、粗糙集、遗传算法、加权和有向图等算法研究进行了综述.针对入侵检测算法的缺点及其在入侵检测方面的研究应用,从入侵检测误报率和漏报率较高,检测速度和匹配效率较低等方面做了分析、改进.最后,指出了在该领域需要进一步研究的热点问题和发展趋势.