Research on alarm analyzer of IPS based on Bayesian classification
Zhenming Shi · Jisuanji gongcheng yu sheji · 2008
To decrease the number of alarm information and false positive ration of intrusion protection system,a new Bayesian classification algorithm which named weight polling Bayesian classification algorithm is designed.The new Bayesian algorithm is more accurate,and can reduce the number of alarm information remarkably.An alarm info analyzer is designed by integrating correlation algorithm with the Bayesian classification algorithm.The comparison experiments between the intrusion protection system with the alarm info analyzer and the intrusion protection system showed that the alarm info analyzer decrease the number of alarm info and false positive ration remarkably.