基于危险理论的入侵检测系统误报率研究

摘要

入侵检测系统误报率高是一个普遍存在的问题.本文从概率论的角度出发,通过对入侵检测系统误报产生的原因进行分析,论证基于危险理论的入侵检测系统在保证检测率的同时,有效地降低入侵检测系统的误报率.%It is a common problem that false positive of intrusion detection system is high. This paper analyzes the reason of intrusion detection system to produce false positive from the perspective of probability theory, and demonstrates that intrusion detection system based on danger theory reduces false positive rate effectively and ensures detection rate at the same time.