模糊辅助应用层语义入侵检测系统-- FASIDS
Fuzzy Aided Application Layer Semantic Intrusion Detection System - FASIDS
摘要：
其目的是开发一个模糊辅助的应用层语义入侵检测系统（FASIDS），它工作在网络栈的应用层。FASIDS包括语义入侵检测系统和基于模糊的入侵检测系统。基于规则的IDS查找被定义为恶意的特定模式。如果非侵入性规则模式在短时间间隔内出现多次，则可能是恶意的。为了检测此类恶意活动，本文提出了FASIDS。在应用层，分析HTTP流量的报头和负载，以发现可能的入侵。在建议的误用检测模块中，语义入侵检测系统的工作规则的基础上，定义各种应用层的误用，发现在网络中。IDS识别的攻击基于规则库中的相应规则。一个事件，不使一个'命中'的规则库是给一个模糊入侵检测系统（FIDS）作进一步分析。
英文摘要：
The objective of this is to develop a Fuzzy aided Application layer Semantic Intrusion Detection System (FASIDS) which works in the application layer of the network stack. FASIDS consist of semantic IDS and Fuzzy based IDS. Rule based IDS looks for the specific pattern which is defined as malicious. A non-intrusive regular pattern can be malicious if it occurs several times with a short time interval. For detecting such malicious activities, FASIDS is proposed in this paper. At application layer, HTTP traffic's header and payload are analyzed for possible intrusion. In the proposed misuse detection module, the semantic intrusion detection system works on the basis of rules that define various application layer misuses that are found in the network. An attack identified by the IDS is based on a corresponding rule in the rule-base. An event that doesn't make a 'hit' on the rule-base is given to a Fuzzy Intrusion Detection System (FIDS) for further analysis.
机构、总结、中文摘要均由AI分析而来，可能存在错误，请以论文正文为准。
