Intrusion Detection Systems: A Survey and Taxonomy

1
???? ???? ?? ????? ?????

• ????? ??????

2
????? ???????

• ????? ????????? ????
• ????????? ?? ????? ?????
• ???????? ?????????? ????
• ???????? ?? ???????????? ??????
• ???????? ?? Support Vector Machines

3
????? ????? ????

• ????? ????? ????
• ????? ??????? ?????? (Misuse Detection)
• ????? ???????? ?????? ??? ?? ????? ??????? ????
  ?? ?????
• ??? ?? ????? ???????? ?????? ???
• ??? ????? ???? ???? ????????
• ????? ????? ??????? (Anomaly Detection)
• ????? ????? ????? ?? ????? ????
• ????? ????? ??????? ???? (False Alarm)
• ??????? ????? ???????? ????????

4
????? ????? ????

• ???? ???? ????????? ????? ????
• ?????? ???? (Network Based)
• ????? ?????? ?? ???????? ??????? ?? ???? ????
  (LAN)
• ?????? ????? ???? ??????
• ?????? ????? ????? ????? ??? ?? ?????
• ?????? ?? ?????? (Host Based)
• ?????? ????? ????? ????? ?? ???? ?????
• ????? ????? ?? ??? ??????
• ?? ??? ????? ?????? ????? ?????? ???? ??????? ??
  ????

5
???? ???? ?? ????? ?????2 1

• ???????? ??????? ??? ?? ????? ????
• ?????? ?????? ????? (Immune System Approach)
• ??? ?????? ?????? (Markov process model)
• ??????? ?? ???? ?????(Rule-Based or Association
  Rule)
• ??? ?? ???? ????????? (Classification)

6
???????? ????
7
???????? ?????????? ????(?????)
8
???????? ??? ?????? 2

• ???????
• ?? ??? ????? ???? ??? ?? ??? ????
• ????? ?? ???????? ????? ?????
• ????????? ??????? ??????
• ??????
• ?????? ?? ?? ???? ???? ????? ?????? ?????
• ????? ????? ???? ?? ?????? ?????? ???? ?? ??
  ????? ??? ????

9
???????? ??? ?????? (?????)

• ???? ?????
• ?????
• ????? ? ???? ?????
• ??????
• ????? (Crossover)
• ??? (Mutation)

10
???????? SVM 5

• ???????
• ???? ???? ?? ????? ?????????
• ???? ???? ??????? ????? ???????? ???????
• ?????? ??? ???? ????????? ?? ?????? ??? ??? ??
  ???? ??? ??????

11
???????? SVM (?????)

• ???? ???? ???? ???? ?????
• ???? Vapnik 1982
• ??? ?? ???? ????? ???? ???? ????????? ?? ?? ????
  ??? ??????? ?????
• ??? ????? ??? (Soft Margin) ???? ????????? ?? ??
  ???? ??? ??? ???? ??????
• ???? ???? ??? ??? ?? ????
• ?????? ????? (Kernel Methods)

12
?????

1. Daniel T. Larose Discovering knowledge in data
   an introduction to data mining . Published by
   John Wiley Sons, Inc.2005 ISBN 0-471-66657-2
2. Mehmed Kantardzic Data Mining Concepts,
   Models, Methods, and Algorithms. Published by
   John Wiley Sons, Inc.2003 ISBN 0471228524
3. Abraham Silberschatz Database System Concepts
   fifth Edition, Ch. 18 Published by McGraw-Hill.
   2006 ISBN 007-124476-X
4. Richard O. Duda Pattern Classification .
   Published by John Wiley Sons, Inc. 2000 ISBN
   0476-05669-3
5. Corrina Cortes, Veladimir Vapnik Support Vector
   Networks,1995 Machine Learning
6. CHRISTOPHER J.C. BURGES,A Tutorial on Support
   Vector Machines for Pattern Recognition, Data
   Mining and Knowledge Discovery 1998