A major difficulty of current intrusion detection model is the attack set cannot be separated from normal set thoroughly. On the basis of paraconsistent logic, an improved intrusion detection model is proposed to solve this problem. We give a proof that the detection model is trivial and discuss the reason of false alerts. A parallel paraconsistent detection algorithm is presented to develop the detection technology based on our model. An experiment using network connection data, which is usually used to evaluate the intrusion detection methods, is given to illustrate the performance of this model. We use one-class supported vector machine (SVM) to train our profiles and use supported vector-clustering (SVC) algorithm to update our detection profiles. Results of the experiment indicate that the detection system based on our model can deal with the uncertain events and reduce the false alerts.
Access to the requested content is limited to institutions that have purchased or subscribe to SPIE eBooks.
You are receiving this notice because your organization may not have SPIE eBooks access.*
*Shibboleth/Open Athens users─please
sign in
to access your institution's subscriptions.
To obtain this item, you may purchase the complete book in print or electronic format on
SPIE.org.
INSTITUTIONAL Select your institution to access the SPIE Digital Library.
PERSONAL Sign in with your SPIE account to access your personal subscriptions or to use specific features such as save to my library, sign up for alerts, save searches, etc.