Anormaly Intrusion Detection Based on SOM
Min Li, Wang Dongliang · 2009
In this paper, we first introduce the principle of SOM algorithm, and then study the real-time intrusion detection system, finding it is not very good in the real-time intrusion detection system. Regarding this problem, this paper presents a real-time intrusion detection model based on SOM algorithm, and takes the system call process as studying object to illustrate the performance of this model. Finally, we compared the detection ability of SOM algorithm with other intrusion detection models by simulation experiment, and the experiment shows that intrusion detection of anomalous based SOM not only meets requirements, but also has a strong nature of real-time, and the nature of real-time of the anomaly intrusion detection model based on SOM is 100 times higher than that of the Forrest and Leepsilas method.