【摘要】 当前大多数入侵检测产品使用的是基于规则的简单模式匹配技术,它们存在着资源消耗量大、误报率高以及随着网速的提高出现丢包等问题。针对这些问题,提出了用决策树算法实现基于协议分析的入侵检测方法。试验结果表明,该方法具有较高的检测速度和较低的正误报率。更多还原

【Abstract】 Most of intrusion detection systems use simple pattern matching technology based on rules,however,they have the problem of low efficiency and high alarm rate positive.In order to improve efficiency and decrease positive alarm rate,presented a new method of using decision tree.It realized intrusion detection system based on protocol analysis.The experiment results show that it has high performance and low false positive.更多还原