Profile Creation Technique Research for Intrsuion Detection Based CCA

GUO Zhi; ZHAO Xi-bin; GU Ming

您当前的位置：

首页 >

文章列表页 >

Profile Creation Technique Research for Intrsuion Detection Based CCA

更新时间：2025-07-16

- Profile Creation Technique Research for Intrsuion Detection Based CCA
- Acta Electronica Sinica Vol. 32, Issue 8, Pages: 1381-1384(2004)
- 作者机构：
  
  1. 清华大学软件学院,北京,100084
  2. 江苏大学计算机科学与通信工程学院,江苏,镇江,212013
  3. 清华大学软件学院北京,100084
  4. 江苏大学计算机科学与通信工程学院江苏镇江,212013
- 作者简介：
- 基金信息：
- DOI：
  CLC： TP393
- Published：2004
- 稿件说明：
移动端阅览
GUO Zhi, ZHAO Xi-bin, GU Ming. Profile Creation Technique Research for Intrsuion Detection Based CCA[J]. Acta Electronica Sinica, 2004, 32(8): 1381-1384.
DOI：

GUO Zhi, ZHAO Xi-bin, GU Ming. Profile Creation Technique Research for Intrsuion Detection Based CCA[J]. Acta Electronica Sinica, 2004, 32(8): 1381-1384. DOI：

摘要

入侵检测系统在保障Internet应用系统安全方面发挥着重要作用.作为异常检测依据

用户行为轮廓的准确程度直接关系到入侵检测系统的检测性能.由于Internet环境的开放性造成用户行为模式多变

导致用户行为轮廓准确程度下降.本文提出了基于信息可视化的入侵检测框架

并进一步提出了基于CCA(Curvilinear component analysis)的可视化算法.该可视化算法比传统算法具有更好的距离映射性能

可为安全专家提供准确的可视信息

有利于安全专家直观地观察用户行为模式

并合理选择聚类算法创建轮廓

从而提高行为轮廓创建的准确性.

Abstract

Intrusion detection systems take an important role in securing Internet applications.The exactness of user behavior profiles directly affects the detection performance of intrusion detection systems because profiles are the criterion of anomaly detection.The exactness of profiles would be reduced with the use of traditional profile creation methods due to uncertainty of user behavior patterns in Internet.We proposes a new intrusion detection scheme based on information visualization

and presents a new CCA(Curvilinear Component Analysis)-based visualization algorithm.This algorithm is better than traditional algorithm in the performance of distance mapping

and can provide more exact visual information for security experts.Visual information of user behavior patterns facilitates security experts to select more suitable cluster analysis algorithms to create more exact behavior profiles.

关键词

Keywords

references

Views

742

下载量

CSCD

Alert me when the article has been cited

提交

Tools

Publicity Resources

Masquerade Detection Based on Shell Commands and High-Order Markov Chain Models

An Anomaly Intrusion Detection Model Based on Nonhierarchical Clustering

Intrusion Detection Based on Sub-Set of System Calls

System Call Anomaly Detection Method Based on HMM

Variable Horizon Multi-Directional Scanning Method for Time Series Anomaly Detection

Related Author

XIAO Xi

ZHAI Qi-bin

TIAN Xin-guang

CHEN Xiao-juan

YE Run-guo

SU Pu-rui

FENG Deng-guo

ZHANG Xiang-feng

Related Institution

State Key Laboratory of Information Security,Graduate University of Chinese Academy of Sciences

Key Laboratory of Network Science and Technology,Institute of Computing Technology,Chinese Academy of Sciences

College of Computer and Information Engineering,Beijing Technology and Business University

Beijing Venustech Company Ltd

State Key Laboratory of Information SecurityGraduate University of Chinese Academy of SciencesBeijing 100049China

⁰