Artificial Intelligence and Intrusion Detection Systems

摘要

Although the computer systems primary defense is its access control, computer systems access control cannot be relied to safeguard against an insiders attack. In such attacks, audit trails are the only method to detect abusive user activity. Previously, the Intrusion Detection Systems (IDS) were built by hand, so such systems faced difficulty in successfully classifying intruders because of need of processing massive volumes of audit trails. In order to overcome this processing overhead, Artificial Intelligence techniques like learning, data clustering, and searching are being used for data analysis. In this paper, we survey the uses of artificial intelligence methods in Intrusion Detection.