高级检索

    入侵检测系统的可信问题

    Creditability Problems in Intrusion Detection Systems

    • 摘要: 首先讨论了当前入侵检测系统存在的信任危机的原因 ,并得出结论 :若希望入侵检测系统的报警可信概率超过5 0 % ,必须使虚警率低于入侵发生的先验概率 接着论述了在异常检测系统和滥用检测系统中产生虚警的原因 最后结合研发的AIIDS系统讨论了抑制虚警可能采取的方法 ,重点讨论了用隐马尔可夫模型过滤系统调用数据以增加相对条件熵的方法和根据入侵的定义以及来自免疫系统机理的启发 ,建立了协同信号机制而遏制虚警的方法.

       

      Abstract: The reasons for creditability crisis in available intrusion detection systems are discussed and the high false positive rate and low intrusion base rate leading to the IDSs undependable are explained. Then the causes for high false positive rate in both misuse detection systems and anomaly detection systems are given. Finally some methods are presented to reduce the false positive rate.

       

    /

    返回文章
    返回