Research on Rapid Detection Algorithm Based on Property Choosing Tree

Neng Shan Feng; Zhong Ming Yang

doi:10.4028/www.scientific.net/AMR.505.386

Paper Titles

FBG Demodulation System Based on Real-Time Correction Technology
p.362

Improved Algorithms for Motion Detection of Intelligent Video Surveillance System
p.367

Intrusion Detection Method Based on Support Vector Machine with Pre-Extracting Support Vector
p.373

Performing Balanced Ternary Logic and Arithmetic Operations with Spiking Neural P Systems with Anti-Spikes
p.378

Research on Rapid Detection Algorithm Based on Property Choosing Tree
p.386

Study of Image Edge Detection Techniques
p.393

System Design of Campus Remote Video Monitoring
p.397

Parameterized Design for the Furniture Product Based on Solidworks
p.402

Research and Development of 3D Driving Simulation System Based on Newton Dynamics Engine and Open Scene Graph Engine
p.409

HomeAdvanced Materials ResearchAdvanced Materials Research Vol. 505Research on Rapid Detection Algorithm Based on...

Research on Rapid Detection Algorithm Based on Property Choosing Tree

Abstract:

The construction method used by detection engine Snort-NG based on ID3 decision tree has the problem of excessive memory occupancy. The idea that the test properties are chosen according to the gradation of rule property in network protocol stack was presented in this paper; that is, the property of link layer first determined, and then network layer and transport layer. The atomicity of the value of these properties were preserved and the values of these properties were treated as a whole. The results of experiment showed that the occupancy of memory was much less in the state of non-trivial property being very common with this approach.

You might also be interested in these eBooks

View Preview

Info:

Periodical:

Advanced Materials Research (Volume 505)

Pages:

386-392

DOI:

https://doi.org/10.4028/www.scientific.net/AMR.505.386

Citation:

Cite this paper

Online since:

April 2012

Authors:

Neng Shan Feng, Zhong Ming Yang

Keywords:

ID3, Protocol Stack, Rule Property

Export:

RIS, BibTeX

Price:

Permissions CCC:

Request Permissions

Permissions PLS:

Request Permissions

Сopyright:

Citation:

References

[1] Kruegel C, Toth T: Using Decision Trees to Improve Signature-based Intrusion Detection, Proceedings of the 6th International Workshop on the Recent Advances in Intrusion Detection (RAID' 2003), pp.173-191.

DOI: 10.1007/978-3-540-45248-5_10

Google Scholar

[2] Quinlan J R: Induction of Decision Trees, Machine Learning,Vol.1-1(1986), pp.81-106

Google Scholar

[3] Paxson V. Bro: A System for Detecting network Intruders in Real-time, Computer Networks, Vol.23-24 (1999), pp.2435-2463.

DOI: 10.1016/s1389-1286(99)00112-7

Google Scholar

[4] Labs M L: DARPA Intrusion Detection Evaluation[S] ( 1999).

Google Scholar

[5] Smaha S E, Inc T A, Austin T X: Haystack: an Intrusion Detection System, Aerospace Computer Security Applications Conference, pp.37-44 ,Fourth,1988.

DOI: 10.1109/acsac.1988.113412

Google Scholar