【摘要】 通过分析现有的入侵检测方法,提出了一个基于无监督Hebb规则的入侵检测方法。此方法采用高效的抓包工具抓取计算机网络数据包;根据抓取到的网络数据包的信息定义行为变量;根据无监督的Hebb规则构建网络行为模型;采用Hamming距离进行检测。实验证明该方法能够正确地构造网络行为模型,并能准确地检测出异常行为。更多还原

【Abstract】 Through analyzing existing intrusion detection methods,an unsupervised Hebb rule based intrusion detection method is put forward.All the network data grams can be caught through an efficient method.The network behavior variables are defined by the caught data gram information.Hebb rule is used to build the network behavior model.After building the behavior model,intrusion behavior can be detected through Hamming distance method.The experimental results prove that the intrusion detection method based on Hebb rule can correctly build the network behavior model and detect abnormal behavior in local area network accurately.更多还原