%0 Journal Article %T Intrusion detection via decision tree and protocol analysis
基于决策树和协议分析的入侵检测研究* %A SONG Ming-qiu %A FU Yun %A DENG Gui-shi %A
宋明秋 %A 傅韵 %A 邓贵仕 %J 计算机应用研究 %D 2007 %I %X Most of intrusion detection systems use simple pattern matching technology based on rules, however, they have the problem of low efficiency and high alarm rate positive. In order to improve efficiency and decrease positive alarm rate, presented a new method of using decision tree. It realized intrusion detection system based on protocol analysis. The experiment results show that it has high performance and low false positive. %K cision tree %K protocol analysis %K intrusion detection
决策树 %K 协议分析 %K 入侵检测 %U http://www.alljournals.cn/get_abstract_url.aspx?pcid=5B3AB970F71A803DEACDC0559115BFCF0A068CD97DD29835&cid=8240383F08CE46C8B05036380D75B607&jid=A9D9BE08CDC44144BE8B5685705D3AED&aid=6A1F5E7F50FCDDF2197DF553C5D2A8BE&yid=A732AF04DDA03BB3&vid=B91E8C6D6FE990DB&iid=59906B3B2830C2C5&sid=73579BC9CFB2D787&eid=DABEF202280E7EF1&journal_id=1001-3695&journal_name=计算机应用研究&referenced_num=0&reference_num=8