介紹了入侵檢測系統(tǒng)的基本概念，在分析了現(xiàn)階段入侵檢測系統(tǒng)存在問題的基礎(chǔ)上，提出了一個(gè)基于數(shù)據(jù)挖掘技術(shù)的入侵檢測系統(tǒng)，其中主要采用了關(guān)聯(lián)規(guī)則中的Apriroi 算法挖掘入侵模式。該系統(tǒng)實(shí)現(xiàn)了規(guī)則庫的自動(dòng)更新，極大地提高了系統(tǒng)的整體性能。另外指出了基本Apriroi算法的不足，并提出改進(jìn)算法，此算法既提高了掃描入侵?jǐn)?shù)據(jù)庫過程中的信息獲取率，又及時(shí)剔除超集不是頻繁項(xiàng)集的項(xiàng)集，進(jìn)一步縮減項(xiàng)集的潛在規(guī)模，提高了頻繁項(xiàng)集即入侵檢測規(guī)則生成的效率。
關(guān)鍵詞：網(wǎng)絡(luò)安全；入侵檢測系統(tǒng)；數(shù)據(jù)挖掘；Apriroi 算法
Abstract：In this paper we discuss the basic concept of intrusion detection system .In order
to solve problems existing in current intrusion detection system, an intrusion detection system based on data mining is given. It uses the Apriroi algorithm in association mining approach. The result show that the system can whole function renew the rule database of the intrusion detection system automaticly and raise the performance of the whole system .
Key words：network security; intrusion detection system; data mining