【作者】 钱田芬； 周健； 洪艳； 任廷；

【Author】 QIAN Tian-fen1 ZHOU Jian2 HONG Yan2 REN Ting11 Department of Computer and Information Hefei University of Technology, Hefei 230009 2 Network Center Hefei University of Technology, Hefei 230009

【机构】 合肥工业大学计算机与信息学院； 合肥工业大学网络中心；

【摘要】 本文设计了一个具有CAS特性的入侵检测系统,该系统以网络攻击特征聚集为关键点,通过对规则的聚集,形成新的知识,从而可以发现新的入侵攻击类型,降低了IDS的漏报率和误报率。并利用Swarm提供的仿真环境,实现入侵检测系统聚集模块的动态仿真,结果表明,通过对攻击特征规则的聚集,发现新的攻击种类,降低因为漏报带来的安全风险。更多还原

【Abstract】 This article designed to have the CAS characteristic intrusion detection system. This system take aggregation of the network attack characteristic as the key point. It forms the new knowledge through aggregate to the rule.Thus may discover the new intrusion attack type, reduced IDS failing to report rate. With using the simulation environment of Swarm, it realizes dynamic simulation of intrusion detection system. The result indicated it may discover the new attack type through aggregate to the characteristic rule of attacks.And reduces security risk because of failing to report rate.更多还原