A novel method to improve the performance of intrusion detection systems
一种改善入侵检测系统性能的新方法

The knowledge base is so huge that intrusion detection systems based on knowledge use much time to search the results. Hence a lot of packets are lost in the environment of high-speed network. In order to solve the problem, the feed back mechanism of the network traffic was introduced. Random projection algorithm was used to flexibly adjust the scale of the knowledge base during the pattern matching procedure. The real-time performance of intrusion detection systems was enhanced. The rate of lost packets and the false warning rate of the systems were reduced.