Building Intrusion Detection System Models with an Improved Algorithm of Association Rules
Yi Yue · Microcomputer Development · 2004
To the problems of lacking of validity on building IDS at present, this paper introduces the process of traditional Apriori algorithm, analyses its problems on building IDS. Then an improved algorithm was proposed to build intrusion detection system models. In this paper,discuss the difference on temporal complexity and compacity between the improved algorithm and the traditonal apriori algorithm. The experiment shows the improved algorithm proposed in this paper can efficiently, accurately and quickly dectect network-based and host-based audit data.