Adaptive intrusion detection algorithm based on rough sets
Ming Gu · Journal of Tsinghua University(Science and Technology) · 2008
Intrusion detection systems are automatic system which recognize intrusions to computers or computer network systems.Existing security detection systems have many problems such as wrong detection of intrusions,missed intrusions,poor real-time performance.An intrusion detection algorithm was developed by combining a rough set algorithm with intrusion detection technology for security detection.The algorithm includes data preconditioning,data discretization,attribute reduction,production of detection rules,and finally analysis of intrusion data with these rules.Test results show that the intrusion detection algorithm is more efficient than algorithms based on BP neural networks and vector machines;thereby,improving the detection ratio by about 10% and reducing the wrong detection ratio.The system provides detection service effective for information systems.