| 模糊关联规则挖掘算法及其在异常检测中的应用 |
| |
| 引用本文： | 熊平,朱天清,黄天戍.模糊关联规则挖掘算法及其在异常检测中的应用[J].武汉大学学报(信息科学版),2005,30(9):841-845. |
| |
| 作者姓名： | 熊平 朱天清 黄天戍 |
| |
| 作者单位： | 1. 武汉大学电子信息工程学院,武汉市珞喻路129号,430079
2. 武汉工业学院计算机与信息工程系,武汉市常青花园中环西路特1号,430023 |
| |
| 基金项目： | 国家公安部科研基金资助项目(200342-823-01)。 |
| |
| 摘 要： | 阐述了在入侵检测中应用模糊关联规则挖掘的方法,提出了对传统Apriori算法的改进。最后以网络流量分析为例,详细描述了在入侵检测中运用模糊关联规则挖掘的步骤,并以规则集相似度建立对入侵的响应机制。
|
| 关 键 词： | 异常检测 数据挖掘 模糊关联规则 |
| 文章编号： | 1671-8860(2005)09-0841-05 |
| 收稿时间： | 2005-05-22 |
| 修稿时间： | 2005年5月22日 |
Algorithm of Mining Fuzzy Associate Rules in Anomaly Detection |
| |
| XIONG Ping,ZHU Tianqing,Huang Tianshu.Algorithm of Mining Fuzzy Associate Rules in Anomaly Detection[J].Geomatics and Information Science of Wuhan University,2005,30(9):841-845. |
| |
| Authors: | XIONG Ping ZHU Tianqing Huang Tianshu |
| |
| Abstract: | An algorithm of mining fuzzy association rules is presented on the basis of improving the classic association rules mining algorithm-Apriori to solve the problem "sharp boundary". In the algorithm, each quantitative attribute is replaced by a fuzzy set and divided into several attributes, which are calculated as separate attributes of database in mining fuzzy associate rules. The process of applying the approach in anomaly detection is discussed in detail. Using experiments on network traffic analysis, the feasibility of applying the mining fuzzy associate rules in intrusion detection is validated. |
| |
| Keywords: | anomaly detection data mining fuzzy associate rules |
| 本文献已被 CNKI 维普 万方数据 等数据库收录！ |
