SYSTEMATIC INTRUSION DETECTION METHOD USING DATA MINING

摘要

The present invention provides a model and a method for intrusion detection. Intrusion detection method is provided for detecting unauthorized use or abnormal activities of a targeted system of a network. This method detects intrusion attacks with high accuracy, low false positive rate and high true positive rate. The invention examines various data mining techniques and constructs a model for detection of intrusion attack with high performance; therefore method increases reliability of intrusion detection alerts. As network attacks have augmented in number and severity with exponential growth of computer network. Intrusion detection system (IDS) is increasingly becoming a decisive component to secure the network. Due to huge volumes of network security audit data as well as complex and dynamic properties of intrusion behaviors, optimizing performance of IDS becomes extremely important. Method proposed in this invention is useful for optimization of performance of IDS.