A fuzzy comprehensive evaluation based distributed intrusion detection
Ming-Guang Ouyang, Weinong Wang, Yuntao Zhang · 2003
Intrusion detection is a complicated decision-making process, which generally involves enormous factors about the monitored system. The fuzzy decision engine (FDE), which is a component of the detection agent in a distributed intrusion detection system, can consider various factors based on fuzzy comprehensive evaluation when an intrusion behavior is judged. The fuzzy comprehensive evaluation based distributed IDS is a hierarchical structure, which has the ability to analyze many types of information from the detection agents. Such an IDS has advantages of high accuracy of detection intrusion, an efficient decision-making process, but nevertheless, low consumption of system resource.