SyncPoint based scoring method in IDS evaluation

YANG Wang1; GONG Jian1; WU Xiong1

您当前的位置：

首页 >

文章列表页 >

SyncPoint based scoring method in IDS evaluation

更新时间：2024-10-14

- SyncPoint based scoring method in IDS evaluation
- Issue 9, (2008)
- 作者机构：
  
  东南大学计算机科学与工程学院
- 作者简介：
- 基金信息：
- DOI：
  CLC： TP393.08
- Published：2008
- 稿件说明：
移动端阅览
[1]杨望,龚俭,吴雄.基于同步点的IDS评估评分方法[J].通信学报,2008(09):1-9.

YANG Wang1, GONG Jian1, WU Xiong1. SyncPoint based scoring method in IDS evaluation[J]. 2008, (9).
[1]杨望,龚俭,吴雄.基于同步点的IDS评估评分方法[J].通信学报,2008(09):1-9. DOI：

YANG Wang1, GONG Jian1, WU Xiong1. SyncPoint based scoring method in IDS evaluation[J]. 2008, (9). DOI：

摘要

评分方法是判定IDS的检测率和误报率的重要环节

评分方法的准确性直接影响评估结果的有效性。现有的考虑误报和不考虑误报的评分方法均存在不同程度的准确性误差

并且不能适应日益增加带宽下的流量需求。分析了评分方法的判定窗口所需要的性质

并基于IDS对报文处理的FIFO队列特性

提出了基于同步点的评分方法。经过理论证明和实验验证

这个新方法相对于现有的评分方法有更高的准确性和更好的可扩展性。

Abstract

Scoring the true positive rate and the false positive rate is a key component in IDS evaluation.The accuracy of the scoring method affects the effectiveness of the evaluation results.There are two kinds of scoring methods existed

one considering the false positive and the other not.But both of them aren’t accurate enough and don’t scale to the traffic volume increase.The characteristics required by the evaluating window was analyzed

and a SyncPoint based scoring method utilizing the features that the IDS processes the packet in a FIFO queue way was proposed.The theoretical analy-sis and the experiment show that the SyncPoint based scoring method is better than the current methods in accuracy and the scalability.

关键词

Keywords

references

Views

638

下载量

CSCD

Alert me when the article has been cited

提交

Tools

Publicity Resources

Scalable PBFT-like algorithm for trust management of degree/graduation certificates

Parallel orchestration and deployment system for scalable heterogeneous service function chain supporting polymorphic network

APG mergence and topological potential optimization based heuristic user association strategy

Research on the scalability of parallel community detection algorithms

Scalability of software defined network

Related Author

LIN Jinzhao

LEI Zhitao

ZHANG Xuewang

Yuan YANG

Hao CHEN

Mingwei XU

Dan PEI

Yilin YOU

Related Institution

School of Software Engineering, Chongqing University of Posts and Telecommunications

College of Microelectronic and Communication Engineering, Chongqing University

Chongqing Key Laboratory of Photoelectronic Information Sensing and Transmitting Technology,Chongqing University of Posts and Telecommunications

Department of Computer Science and Technology, Tsinghua University

Beijing National Research Center for Information Science and Technology (BNRist)

AI问答

⁰