Feedback-Prediction Mechanism Towards Misuse Detection
Jian Gong · 2004
IDS for high-speed backbone network should meet two requirements. Firstly, it should recognize the intrusion plan as soon as early; Secondly, it should try its best to decrease operation cost of intrusion detection. To meet the two requirements have close connection with intrusion detection model and the measures IDS use. The paper introduces how to import Feedback-prediction mechanism to misuse detection system, so that it can predict whether the current behavior of user implies intrusion. Moreover, Feedback-prediction mechanism can notably decrease operation cost of IDS and meet the real-time intrusion detection for high-speed network. The result of experiment shows that Feedback-prediction mechanism can accurately predict intrusion and improve the capability of IDS to deal with data.