期刊名称：Oriental Journal of Computer Science and Technology
印刷版ISSN：0974-6471
出版年度：2009
卷号：2
期号：1
页码：69-74
语种：English
出版社：Oriental Scientific Publishing Company
摘要：Recently data mining methods have gained importance in addressing network security issues, including network intrusion detection-a challenging task in network security. Intrusion detection systems aim to identify attacks with a high detection rate and a low false alarm rate. Intrusion Detection System (IDS) and Intrusion Prevention Systems (IPS) in computer network security are real-time software assessment by monitoring for suspicious activity at the network and system layer. Software scanner allows network administrator to audit the network for vulnerabilities and thus securing potential holes before attackers take advantage them. The network traffic datasets provided by the DARPA 1998 offline intrusion detection project are used in our empirical investigation, which demonstrates the feasibility and promise of unsupervised learning methods for network intrusion detection using UML diagrams. The goal of this paper is to place some characteristics of good IDS and examine the positioning of intrusion detection as part of an overall layered security strategy and a review of evaluation criteria for identifying and selecting IDS.
关键词：IDS- Intrusion Detection System ; IPS-Intrusion Prevention Systems ; WIDZ- Wireless Intrusion Detecting System
Loading...
