CAO Yuan-da, XUE Jing-feng. The Application of Weighted Association Rules in Host-Based Intrusion Detection System[J]. JOURNAL OF BEIJING INSTITUTE OF TECHNOLOGY, 2002, 11(4): 418-421.
Citation:
CAO Yuan-da, XUE Jing-feng. The Application of Weighted Association Rules in Host-Based Intrusion Detection System[J].JOURNAL OF BEIJING INSTITUTE OF TECHNOLOGY, 2002, 11(4): 418-421.
CAO Yuan-da, XUE Jing-feng. The Application of Weighted Association Rules in Host-Based Intrusion Detection System[J]. JOURNAL OF BEIJING INSTITUTE OF TECHNOLOGY, 2002, 11(4): 418-421.
Citation:
CAO Yuan-da, XUE Jing-feng. The Application of Weighted Association Rules in Host-Based Intrusion Detection System[J].JOURNAL OF BEIJING INSTITUTE OF TECHNOLOGY, 2002, 11(4): 418-421.
Association rules are useful for determining correlations between items. Applying association rules to intrusion detection system (IDS) can improve the detection rate, but false positive rate is also increased. Weighted association rules are used in this paper to mine intrustion models, which can increase the detection rate and decrease the false positive rate by some extent. Based on this, the structure of host-based IDS using weighted association rules is proposed.
L ee W K,Stolfo S J.Data mining approaches for intr usio n detection[Z]. T he sev enth U SEN IX Security Symposium(SECU R IT Y?98),San Antonio,T X,1998.
[2]
He Yanxiang,Shi L i,Zhang G e,et al.Algo rithms ofdiscovering association rules and t heir tradeoffs[J]. M iniM icro System,2001,22(9):1065-1068.
[3]
L iu B,Hsu W,M a Y.Integrating classification and association rule mining[Z]. K now ledge Discovery and DataM ining(KDD?98),New Y ork,1998.
[4]
L u Songfeng,Hu Heping.M ining weighted associationr ules[J]. M ini M icro System,2001,22(3):347-350