文献类型：会议论文

英文题名：The Application of the Detection and Data Mining Algorithm Optimization in Honeynet

作者：Dong Nanping[1];Zhou Guanling[1];Wang Yuping[1]

第一作者：董南萍

通讯作者：Dong, NP[1]

机构：[1]Beijing Union Univ, Coll Automat, Beijing, Peoples R China

第一机构：北京联合大学城市轨道交通与物流学院

通讯机构：[1]corresponding author), Beijing Union Univ, Coll Automat, Beijing, Peoples R China.|[1141751]北京联合大学城市轨道交通与物流学院;[11417]北京联合大学;

会议论文集：2nd ISECS International Colloquium on Computing, Communication, Control and Management (CCCM 2009)

会议日期：AUG 08-09, 2009

会议地点：Sanya, PEOPLES R CHINA

语种：英文

外文关键词：detection algorithm; honeynet; association rules; optimal design

摘要：A technical scheme, which can properly arrange IDS and optimally apply the algorithms of detection and data mining to the Honeynet environment, is proposed in the building automation system completed by the author recently. In this specific environment, the position of IDS is deployed reasonably and the anomaly and misuse detection algorithm of IDS is designed and selected optimally. Meanwhile, the misuse detection rules are updated dynamically with the combination of data-mining association rule algorithm. The design makes the classical and mature algorithms display their technical characteristics and advantages to the largest extent in the project and enable the honeynet to protect the internal control network as expected.