Application of C4.5 algorithm in Snort intrusion detection for information fuzzy aggregation
Tao Jian · Journal of Computer Applications · 2009
An improved adaptive model based on C4.5 algorithm for fuzzy aggregating Snort intrusion alarms was presented. With the rule-mining of the difference impact on intrusion properties based on intrusion action, the model was adjusted, and the weight matrix of decision-making property was amended. Therefore the variety of intrusion environment was adapted actively, and the accuracy rate of intrusion alarm aggregation was enhanced.