摘要
传统的入侵检测方法一般缺乏有效性、适应性和扩展性。而基于数据挖掘的入侵检测方法采用以数据为中心的观点,把入侵检测问题看作为一个数据分析过程,运用关联规则、频繁片断和分类等算法,尽可能地减少了建立一个入侵检测系统中的手工和经验成分,较好地解决了有效性、适应性和扩展性的问题。
Current IDSs lack effectiveness, adaptability and extensibility. IDSs based-on data mining take a data-centric point of view and consider intrusion detection as a data analysis process, use association rules, frequent episodes and classification arithmetic, solved the problem of effectiveness, adaptability and extensibility.
出处
《网络安全技术与应用》
2003年第4期35-37,共3页
Network Security Technology & Application
