【摘要】 通过分析数据挖掘技术在入侵特征搜寻中的作用，提出了一个应用在基于网络和主机的混合模式入侵检测系统中的特征挖掘模型。该模型的特点是完全运用数据挖掘技术来建模，不仅对各种已知和未知入侵行为具有很好的辨别度，而且非常适合于现在流行的混合模式的入侵检测系统。更多还原

【Abstract】 Based on the full analysis of the function of data mining in searching intrusion feature,the paper builds a feature-discover model used in a intrusion detective system(IDS) based on both network and host.Different from other models ,it builds such model wholly using data mining.It not only can discover all sort of intrusion behavior both known and unknown,but also especially suit for the IDS based on both network and host ,which is very popular today.更多还原