An Anomaly Detection Method Based on Fuzzy Judgement

Currently most internationally implemented IDSs are based on the technology of misuse detection. The technology of anomaly detection, especially which is based on network, is not so mature. How to improve its accuracy, efficiency, and usability is the difficulty of research. Presented in this paper is an algorithm of anomaly detection oriented to computer network: FJADA, which has benefited from fuzzy mathematics. The algorithm applies fuzzy judgement to evaluate the anomaly degree of a network connection, and then decides whether the network connection is intrusive or not. Experiments have verified that the method can detect unknown intrusion and the accuracy is high.