A Fast Host-Based Intrusion Detection System Using Rough Set Theory

摘要: Intrusion Detection system has become the main research focus in area of information security. Last few years have witnessed a large variety technique and model to provide increasingly efficient intrusion detection solutions. We advocate here that intrusive behavior process is highly localized characteristics process. There are certain smaller episodes make an otherwise normal stream. As result it unnecessary most often misleading consider whole totality attempt characterize its abnormal features. In present work we establish subsequences reasonably small length sequence calls would suffice identify abnormality use rough set theory demonstrate this concept. Rough also facilitates identifying rules for detection. The contributions paper following- (a) It established very subsequence call sufficient with high accuracy. our using DARPA'98 BSM data; (b) A based developed can extract detection; (c) An algorithm presented determine status as either or on-line.