Intrusion detection via decision tree and protocol analysis
基于决策树和协议分析的入侵检测研究*

Most of intrusion detection systems use simple pattern matching technology based on rules, however, they have the problem of low efficiency and high alarm rate positive. In order to improve efficiency and decrease positive alarm rate, presented a new method of using decision tree. It realized intrusion detection system based on protocol analysis. The experiment results show that it has high performance and low false positive.