Study on ontology-based intrusion detection

Abstract

Meeting distributed detection's requirements of accuracy, expansibility and portability, ontology is introduced to organize and systematize all intrusion detection behavior at any level, consequently reducing ambiguity and supporting share. The paper presented ontology-based intrusion detection model with advantages of hierarchical and cooperative models, and then the deduction of expert system was used to detect the complex attacks. © 2010 IEEE.