Model of database intrusion detection based on rough set
Shi Wang · Informationization · 2009
An intrusion detection model is proposed to detect anomalous transactions in DBMS.The model is based on rough set and capable of extracting uses'normal behavior profile from user'normal historical audit data.It can not only detect intrusions efficiently,but also can avoid mistaking an innocent user for a malicious attacker.Hash algorithm is applied to accelerate the match process of SQL templates.Finally,a performance analysis to the model is reported.