statistic evidence 中文意思是什麼
statistic evidence
解釋
統計證據-
The ids works by two way, misuse detection and anomaly detection, misuse detection flags an intrusion on intrusion signature, this kind of detecting technic can be realized much more easily, and much more accurate, but it can not find some intrusiones that have been disguised or new kinds of intrusion. the anomaly detection can detect in more wide field, anomaly detection can compare new statistic data with average record, then anomaly record will be found, but it ' s more difficult to set a threshold, if the threshold is too big, some intrusion may be put through, if the threshold is too small, the ids will give more false positive alarm, and the threshold will be different with different people or different period, so the ids just simply show us their suspicious record, the administrator or expert will be in duty to analyze this record and give conclusion, the ids give more alarm than it should, leave us more detection record to analyze, and this is a hard work, we can not distinguish an intrusion or not if we analyze only one record, but we can judge if we find the relation among mass detection evidence. in this article, we try distinguish an intrusion using d - s theory ( proof theory ) instead using manual work, the ids will be more helpful and efficient
濫用檢測採用的是特徵檢測的方法，實現較為簡單，判斷的準確性較高，但是不能判斷一些經過偽裝的入侵或特徵庫中尚未包含的入侵，異常檢測能夠根據以往記錄的特徵平均值，判斷出異常情況，但是對于異常到什麼程度才視為入侵，這個閥值非常難以確定，閥值設定的太高，有可能漏過真正的入侵，如果設定的閥值太低，又會產生較高的誤警率，而且這個閥值因人而異，因時而異，因此現在的入侵檢測系統把這部分異常記錄以一定的形式顯示出來或通知管理人員，交給管理人員去判斷，而這些ids系統難以判斷的記錄，如果對每個證據單獨地進行觀察，可能是難以判斷是否是入侵，而把許多先後證據關聯起來，專家或管理人員根據經驗能夠判斷訪問的合法性，本文試圖引入人工智慧中證據理論的推理策略和示例學習方法，代替人工檢查分析，可以提高效率，降低誤警率，並可以對一個正在進行得可疑訪問實現實時檢測，通過搜索及時判斷，及時阻斷非法訪問，比事後得人工處理更有意義。
分享友人