호스트 기반 침입탐지를 위한 데이터 마이닝 방법론

서지정보

ㆍ발행기관 : 한국산업경영시스템학회 ㆍ수록지정보 : 한국산업경영시스템학회 학술대회
ㆍ저자명 : 소진, 이상훈

목차

Abstract
1. 서론
2. 데이터 마이닝과 침입탐지 데이터
3. 데이터 마이닝 기술 및 알고리즘
4. 감사 자료을 통한 패턴분석
5. 결론 및 향후 연구
[참고문헌]

영어 초록

Due to recent changes of computer & networks, the IDS(Intrusion Detection System) need to be developed for new intrusion patterns. The current IDS have limited on recognition and correspond to new intrusion patterns on detection speed for multi packet which dealing on the network. Therefore, new technology need to increasing efficiency and speed of detection speed requested. The aim of this research is the development of standard and systematic method on intrusion detection. The core idea is using data mining method to find bundle of patterns on networking program and user behavior patterns as well as apply the feature systems to calculate the classifiers which could recognize the well known or irregular intrusions. In this paper, we will recommend following steps to develop the intrusion detection system: First, we will learn the detection applying technique for multi intrusion cases. Second, we will use data mining technique which fast recognize the current intrusion patterns and new patterns. Third, to recognize intrusion patterns, information of packet on the network and recorded data on the host sessions have studied. Fourth, we will create regulations between intrusion and normal behavior by practical use of logged file abstraction programs. Fifth, we will analysis intrusion detection pattern based on the created regulations and study results.

참고 자료

없음