Sequential Patterns Mining Approach for Network Intrusion Detection
Qing Li · 2004
One of the most advace research problems of network security .database and information decision is Data Mining based on Instrusion Detection- Since in sequential patterns mining for IDS,frequent network patterns and system activity patterns are got from operation system and single audit stream, the old sequential patterns mining algorithms are not fit for ID, which include mining single pattern from event stream and mining patterns from data sequences. We put forward the framework and the realtime mining model of sequential patterns mining in IDS .and more, we design a new algorithm based-on axis-attributes, reference-attributes and relative support for intrusion dectection whose name is SPM-ID( Sequential Patterns Mining for Intrusion Detection). What more, we implemente SPM-ID on enviorment in KDD Cup99 data set.