Research on Combined Analysis Module and Information Fusion Technology of the Mixed Intrusion Detection System
Shuyu Chen · Journal of Chongqing Institute of Technology · 2009
In view of the problems of high error report rate and low detecting efficiency in the invasion detecting system in domestic study,this paper improves the analyzer of invasion detecting system by adopting two-layer structure,and adding co-analysis layer to misuse analysis layer.In co-analysis layer,data fusion technology is employed,Dempster-Shafer evidence theory is taken as data fusion algorithm,and a new fusion method based on Dempster combined rules.Contrast experiments between invasion detection system with the analyzer and without the analyzer show that this analyzer can reduce error report rate efficiently.