For the main body of the intrusion is coming indirect , the scope of it larger , the techniques are distributing and the object is changing , the intrusion detection system must improve its response speed , data analyzing speed and reduce the miss rate and false alarm rate . this system uses both parallel reasoning and fuzzy reasoning techniques 由于目前入侵趋于主体对象的间接化、入侵或攻击的规模扩大、入侵或攻击技术的分布化、攻击对象转移，因此必须提高入侵检测系统的实时响应速度、数据处理速度、同时降低系统对漏洞的误报率和漏报率。
The results of process monitoring indicate that this method is more effective than the process monitoring method based on conventional blind source signal separation . 6 ) due to the complexity of process information , a process monitoring method which applies independent component analysis and principal component analysis to extract nonnormal distributed process features and normal distributed process features is presented , which avoids the assumption that process information is subjected to multivariate normal distribution 8 )鉴于在过程中，过程信息的平稳性并不确定，提出了一种不考虑过程平稳性能的过程监控方法，仿真表明该方法比基于传统ica的过程监控方法具有更少的误报率和漏报率，而比基于mspc的过程监控方法具有更少的误报率，从而说明该方法的有效性。
This kind of investigations have acquired some accomplishments at present , but much of these accomplishments were limited to resolve certain frondose application using certain fixed network model and were far from satisfying the minimizing forecasting faults demands of ids improving . the purpose of this theme is to establish a multi - net - model and make it generally applicable during the arithmetic realization process to content all application demands and thus minimize forecasting faults in the end of this article applying the advanced bp network to the es in ids minimized the false forecasting , further more it discussed the process of using visual c + + to realize these networks 目前，这方面的研究已有了部分成果，但大多只局限于应用一种固定的网络模型来解决某一具体的应用，还远远不能满足入侵检测漏报和误报率高的问题，本文的研究目的就是要建立一种灵活的网络模型，并在算法实现过程中使其具有通用性，以满足各种应用的需要，尤其是使入侵检测的漏报率和误报率趋于最小化。
It has the important influence on detection rate , false positive rate and ability of real time responds . so this thesis labors over kdd cup 99 intrusion detection data set and uses some rules to reduce the dimensions of feature sample space in the derection of sbg . thus the phenomena of dimension exploding can be avoided 特征提取是入侵检测的关键,对检测率、误报率和实时性有着重要影响,因此本文在针对kddcup99入侵检测数据进行了大量分析,并沿sbg的搜索方向,使用一定的规则集来达到特征样本空间的维数的削减的目的,从而避免了“维数爆炸”的现象。
The system whose distance precision is within ? 00m is adapt to crude oil gathering and transferring pipelines and long distance pipelines without missing alarm and has low rate of wrong alarm . it detects the real time situation of pipeline " s running . when the system meets the si tuat ion in which the amount of leak is beyond the 1 percent of total pipeline run , it will send out alarm in a instant , give the point of leak and evaluate the extent of leak 该系统适用于原油集输管线及原油长输管线，无漏报，误报率低，定位精度达到了200米，实时监测原油管道的运行状态，遇有大于管道输送量的1泄漏时，能够在短时间内声光报警，给出泄漏位置及估计泄漏程度。
Based on analyzing deeply the basal principle and the system structure of the multi - sensors information fusion technology , and according to the model of feature level fusion , the achieving method of fire detection system based on simulated annealing feature level fusion is presented . this method that searches first - rank ‘ feature fusion coefficient ’ through simulated annealing arithmetic can improve the validity property and demote the mis - warning rate 在深入讨论了多传感器信息融合技术的基本原理及体系结构的基础上根据特征层融合的模型提出了基于模拟退火的特征层融合火灾探测系统实现方法,使用模拟退火算法搜索最佳的“特征融合系数” ,从而提高火灾探测的正确性,降低误报率。
Firstly this paper analyses the current security managements " of network management system problems and disadvantages , and it points out that their accuracy is very low mainly because of they detecting intrusions by only one characteristic of intrusions without considering the intrusions " effects 本文首先分析了目前的网管系统中的安全管理存在的缺点与问题，指出其主要缺点是利用单一证据来判断入侵，并不考虑入侵行为对网络的作用效果，从而造成误报率较高准确性较差。
Then , the paper present a protocol misusage ids in application layer based on markov chain , and obtain the following results after test : the system can have good effection on detecting the probe packet , dos attack and novelty attack . the system can overcome part of disadvantages in traditional intrusion detection system , and adapt requirements with different network . the experiment shows that the system can improve the detection accuracy rate , reduce the false negatives probability 通过对检测系统的测试分析,系统对扫描探测报文、 dos攻击报文和新的攻击报文等有较好的检测率。基于马尔可夫链建立的网络异常检测系统可以克服传统入侵检测系统的部分缺陷,能够适应不同网络环境的要求,同时也有效提高了系统的检测能力和检测效率,降低了误报率。
We further developed an adaptive packet marking scheme based on one of our router numbering schemes . the maiking scheme is better than others in that there is leys workload , fewer false positives and fewer packets are required in path reconstruction . the last also reduces the time delay before responding to dos attacks 我们在此基础上提出了一个基于路由器编码的自适应包标记方案，该方案无论在路径追踪的运算量上、在追踪的误报率上，还是在追踪所需的数据包的数量上(这与在攻击中进行追踪所需的时间紧密相关，从而直接影响到对攻击响应的快慢)等多个方面都比同类的方法优越。
In principal , dynamic sliding window make naids have the ability of real - time detection ; classification engineering make naids keep lower false positive rate , so in this sense , the approaches put forward in this dissertation can solve the most pressing problem faced by current ids to great extent 在工作原理上，动态滑动窗口技术的提出，保证了naids可以做到实时监测；分类引擎的引入，使得naids可以保持较低的误报率，由于分类引擎由多种性质不同的主流分类算法组成，本文通过实验方式详细验证了各种分类器在入侵检测领域的性能问题。
