Application Research of Data Mining Technology to Intrusion Detection

Along with the rapid development of Internet,many new network attacks emerge unceasingly.Traditional intrusion detection system(IDS) based on expert system depending on handwork and experience,is already very difficult to satisfy the existing application request now,because it is facing challenges from new forms of attacks and system upgrade.So it is necessary to find a method that can extract intrusion patterns from substantive network data automatically.The main idea is to apply data mining methods to learn rules that can capture normal and intrusion activities from pre-processed audit data that contain network connection information.These rules can be used to detect intrusion behavior later.In this paper,data mining technology has been applied to intrusion detection, some algorithms of data mining have been discussed.Then a model of data-mining based on intrusion detection system has been proposed.The experiment proved that,compared with the traditional system,this model has certain superiority in auto-adaptive and extensive.