【摘要】 针对当前入侵检测存在的问题,通过引入粗糙集方法,综合误用检测和异常检测设计了一种基于粗糙集和人工免疫的集成入侵检测(RSAI-IID)模型,提出了一种在入侵检测中实现疫苗注入的方法。采用粗糙集方法获取疫苗,并保证了疫苗的优良性,优化检测性能;误用检测筛掉已知的入侵行为,提高检测的速度;异常检测针对未知攻击进行实时检测。最后在KDD99数据集上进行实验仿真,验证了模型的可行性和有效性。更多还原

【Abstract】 According to the problems of intrusion detection,an integrated intrusion detection model based on rough set and artificial immune(RSAI-IID) was proposed by using rough set and integrating misuse detection and anomaly detection.The rough set method was used to achieve the vaccine which was injected in the model,to get better vaccine,and to optimum the performances of detection;misuse detection was used to get off the known intrusions;anomaly detection was used to detect the novel intrusions.RSAI-IID model was validated on KDD 99 dataset.The experimental results show its feasibility and effectiveness.更多还原