An IFRP(IDS based on Fuzzy Rule and Pattern) design for improving on an Intrusion Detection Rate and False Positives

초록

The IFRP(IDS based on Fuzzy Rule and Pattern) proposed in this paper is the IDS which generates Fuzzy rules by extracting the aggregated information from the captured packets and detects an intrusion by generating Fuzzy patterns through the correlation analysis of the Fuzzy rules. IFRP consists PAM(Packet Analysis Module) analyzing the captured packets, DMM(Data Mining Module) generating Fuzzy rules, FRAM(Fuzzy Pattern Analysis Module) analyzing patterns about the Fuzzy rules, and IDM(Intrusion Detection Module) detecting the intrusion with the generated Fuzzy rules and patterns. And, the simulation result shows that the IFRP reduces false positives and improves an intrusion detection rate by detecting an intrusion with Fuzzy rules and Fuzzy patterns.

키워드