The Application of an Improved Temporal Algorithm of Association Rules to Intrusion Detection
Shunxiang Wu · Journal of Xiamen University · 2006
The capability of intrusion detection system is related to its detected rules greatly,so how to get the valid intrusion detection rules quickly from network data is very important to IDS(Intrusion Detection System).In this paper the drawback of the traditional algorithm of association rule is analyzed.And then the optimizing policy about data mining algorithm and the method of disposing temporal data are discussed specially.The main attribute is used to restrict the final rules.And some attributes are included in the final rules directly according to their high frequency.The improved algorithm is more improved in mining speed and detectable probabilities of final rules.Some formerly ignored rules are discovered,at the same time some unnecessary rules are eliminated in the experimentation.The validity of the improved algorithm is proved by the experimentation.