Profile Creation Technique Research for Intrsuion Detection Based CCA
GUO Zhi1, ZHAO Xi-bin2,1, GU Ming1
1. School of Software,Tsinghua University,Beijing 100084,China;2. School of Computer Science and Telecommunications Engineering,Jiangsu University,Zhenjiang,Jiangsu 212013,China
Abstract:Intrusion detection systems take an important role in securing Internet applications.The exactness of user behavior profiles directly affects the detection performance of intrusion detection systems because profiles are the criterion of anomaly detection.The exactness of profiles would be reduced with the use of traditional profile creation methods due to uncertainty of user behavior patterns in Internet.We proposes a new intrusion detection scheme based on information visualization,and presents a new CCA(Curvilinear Component Analysis)-based visualization algorithm.This algorithm is better than traditional algorithm in the performance of distance mapping,and can provide more exact visual information for security experts.Visual information of user behavior patterns facilitates security experts to select more suitable cluster analysis algorithms to create more exact behavior profiles.
郭 陟;赵曦滨;顾 明. 基于CCA的入侵检测行为轮廓创建技术研究[J]. 电子学报, 2004, 32(8): 1381-1384.
GUO Zhi;ZHAO Xi-bin;GU Ming. Profile Creation Technique Research for Intrsuion Detection Based CCA. Chinese Journal of Electronics, 2004, 32(8): 1381-1384.