Algorithm of Intrusion Detection Based on Data Mining and Its Implementation
孙海彬, 徐良贤, 陈彦华 · 东华大学学报：英文版 · 2004
Intrusion detection is regarded as classification in data mining field. However instead of directly mining the classification rules, class association rules, which are then used to construct a classifier, are mined from audit logs. Some attributes in audit logs are important for detecting intrusion but their values are distributed skewedly. A relative support concept is proposed to deal with such situation. To mine class association rules effectively, an algorithms based on FP-tree is exploited. Experiment result proves that this method has better performance.