A real-time network intrusion detection system for large-scale attacks based on an incremental mining approach

• Published in: Computers & security Vol. 28; no. 5; pp. 301 - 309
• Main Authors: Su, Ming-Yang, Yu, Gwo-Jong, Lin, Chun-Yuen
• Format: Journal Article
• Language: English
• Published: Amsterdam Elsevier Ltd 01.07.2009; Elsevier Sequoia S.A
• Subjects: Association rules; Data mining; Denial of service attacks; Fuzzy association rules; Fuzzy logic; Incremental mining; Intrusion detection systems; Network security; Online mining; Real time; Real-time NIDS; Studies; Denial-of-service attacks; Fuzzy association rules; Incremental mining; Network security; Real-time NIDS; Association rules; Online mining

None of the previously proposed Network Intrusion Detection Systems (NIDSs), which are subject to fuzzy association rules, can meet real-time requirements because they all apply static mining approaches. This study proposed a real-time NIDS with incremental mining for fuzzy association rules. By con...