Research on the Technology of Association Rule Mining in Intrusion Detection System
Junyuan Xie · 2008
Intusion detection system uses the analysis of association rule to mine the association relationship of network data and system feature,establish the normal behavior stock and find out the abnormal connection.The report discribes a improved FP_tree algorithm——NFP_tree algorithm and uses it to mine asssociation rule in IDS.The experiment shows that the algorithm has better results than traditional association algorithm in IDS.