Sampling method for network intrusion detection
Gaogang Xie · Jisuanji yingyong yanjiu · 2008
Packet sampling which was widely used in network monitoring is a good method to upgrade data packet processing capacity.But the traditional packet sampling algorithm will result in substantial intrusion detection rate reduction.This paper raised a new packet sampling algorithm which used the normal and attacks flow of traffic in the continuity of time against intrusion detection.It could improve IDS's packet processing capacity in the premise,there was still very good detection rate.