An Intrusion Detection Model Based on D-S Evidence Theory
Wei Song · Jisuanji fangzhen · 2008
This article introduces the data fusion theory into the fault diagnosis process,proposes an fault diagnosis system model based on the data fusion,and has applied the multi-Agent technology in the system model realization process,enable the entire model having the good extension.In the data fusion process of clustering、merging and associating this article has applied the D-S evidence theory,solves the problems of warning onrush、high false reporting rate、inferior question between the warning association which existed in the current fault diagnosis system,enhances the diagnosis performance of the distributing intrusion detection system.This model also uses the multi-agents technology.This does not only implement the multi-source of the data collection,but also implement the distributed intrusion detection and real time respond,it has done the most to reduce the coupling of each part of system,insuring extensibility of model.