基于异常检测的入侵检测技术

摘要

The authors provided a comprehensive survey of anomaly detection systems used in the recent years. Intrusion detection was divided into 3 kinds based on technologies used. They are statistical anomaly detection, machine learning based anomaly detection and data mining based anomaly detection. The authors described the various features of anomaly detection technologies in details, represented the algorithms used in the current Anomaly Intrusion Detection Systems, the implements of the algorithms, and also compared the effects of various detection algorithms through the experiment.%对目前的异常检测技术进行了全面概述, 按照采用的不同技术将异常检测分为基于统计、基于机器学习和基于数据挖掘3种, 阐述了各种异常检测技术的特征, 并描述了目前基于异常入侵检测系统用到的各种算法及其实现方法. 通过实验结果, 比较了各种算法的检测效果.