论文部分内容阅读
针对入侵检测系统大都采用单一的检测模式,难以有效地处理漏报、误报和对未知攻击无法有效识别的问题,分析不同类型网络流量的特征,文中提出一种将BP网络、遗传算法和Snort相结合的混合式入侵检测系统,综合了异常检测和误用检测的优点,克服了单一检测模式的不足。实验结果表明,该方法能有效提高入侵检测系统的检测率和准确率。
Aiming at the single detection mode of intrusion detection system, it is difficult to effectively deal with the omission, false positive and the problem of unknown attack can not be effectively identified, and to analyze the characteristics of different types of network traffic. In this paper, a BP network, genetic algorithm and Snort Combined with the hybrid intrusion detection system, the advantages of anomaly detection and misuse detection are combined to overcome the deficiencies of the single detection mode. Experimental results show that this method can effectively improve the detection rate and accuracy of intrusion detection system.