The research on user model for the network intrusion detection system

Abstract

Internet has become one of the most important tools in the people's lives with the rapid development of the Computer Science and Technology. It is important for everyone to ensure the safety of computer networks. Intrusion Detection System can be helpful for people to use computer network safely. Traditional intrusion detection technologies are based on the behavior of users. The content browsed by intruders is also an important clue for the Intrusion Detection System. In this paper, based on analyzing the traditional user profile, a user model named AVSM (Advanced Vector Space Model) which combined with user's browsing content and behavior is proposed. The experimental results show that, using this model, Intrusion Detection System can analyze both the content and behavior of intruder, and detect the intruder more effectively. © 2012 Springer-Verlag Berlin Heidelberg.