Design of Fussy Intrusion Recognition Engine
Feng Liu · 2004
The Fuzzy Intrusion Recognition Engine (FIRE) is a network intrusion detection system that uses fuzzy systems to assess malicious activity against computer networks. This paper originally explores some fuzzy theories, including fuzzy knowledge expression, fuzzy match and fuzzy inference, geares towards intrusion detection. The model of FIRE based on above fuzzy theories is built and discussed in detail. The intrusion features are presented by fuzzy elements,fuzzy factors,fuzzy expression and fuzzy trees. Fuzzy match is carried out by calculate of resemblance. Finally decisions are made by fuzzy inference. These methods can effectively improve the false negative rate and false positive rate of IDS.