Application of Data Mining Technology to Intrusion Detection System

摘要

Based the analysis of current Intrusion Detection technologies, the paper introduces the Data Mining Technology to the Intrusion Detection System, proposes a system architecture as well as a pattern strategy of automatic update. By adopting the Data Mining Technology, the frequency patterns could be dug out from a mass of network events. So, effective examination rules could be discovered, which would be then used to instruct the analysis of IDS network intrusion. Meanwhile, the usage of the pattern strategy of automatic update that adopts the ways of network real-time analysis has improved the efficiency and the veracity of the mining greatly. The integration of them would be effective in solving the problem of high misreport and false alerts rate in the traditional Intrusion Detection Systems.