公开(公告)号：US07853542B2

公开(公告)日：2010-12-14

申请号：US11958461

申请日：2007-12-18

申请人： Cheng-Fa Tsai ,  Chia-Chen Yen

发明人： Cheng-Fa Tsai ,  Chia-Chen Yen

IPC分类号： G06F17/00 ,  G06N5/00

CPC分类号： G06F17/30979 ,  G06F17/30705

摘要： A method for grid-based data clustering comprises: creating a feature space having a plurality of cubes by a computer and showing the feature space by an interface of the computer, disposing a plurality of data stored in a database into the cubes, and then defining a plurality of the cubes as populated cubes; identifying whether the data within each of the populated cubes being evenly distributed or not to define each populated cube as a major cube or minor cube; combining border data of the minor cubes with the data in the major cubes; and designating all the data combined with each other as in the same cluster and recursively processing the above procedures to cluster all the data stored in the database.

摘要翻译： 一种用于基于网格的数据聚类的方法包括：通过计算机创建具有多个立方体的特征空间，并通过计算机的接口显示特征空间，将存储在数据库中的多个数据放置到立方体中，然后定义 多个立方体作为填充的立方体; 识别每个填充的多维数据集中的数据是否均匀分布，以将每个填充的多维数据集定义为主要立方体或次立方体; 将次立方体的边界数据与主立方体中的数据组合; 并指定在同一个集群中相互组合的所有数据，并递归地处理上述过程来集群存储在数据库中的所有数据。

公开(公告)号：US20080306715A1

公开(公告)日：2008-12-11

申请号：US12021342

申请日：2008-01-29

申请人： Cheng-Fa Tsai ,  Chia-Chen Yen

发明人： Cheng-Fa Tsai ,  Chia-Chen Yen

IPC分类号： G06F17/10 ,  G06F21/00

CPC分类号： H04L63/1425 ,  G06F21/55

摘要： A detecting method over network intrusion comprises: selecting a plurality of features contained within plural statistical data by a data-transforming module; normalizing a plurality of feature values of the selected features into the same scale to obtain a plurality of normalized feature data; creating at least one feature model by a data clustering technique incorporated with density-based and grid-based algorithms through a model-creating module; evaluating the at least one feature model through a model-identifying module to select a detecting model; and detecting whether a new packet datum belongs to an intrusion instance or not by a detecting module.

摘要翻译： 网络入侵检测方法包括：通过数据转换模块选择多个统计数据中包含的多个特征; 将所选择的特征的多个特征值归一化为相同的比例以获得多个归一化特征数据; 通过模型创建模块通过结合基于密度和基于网格的算法的数据聚类技术创建至少一个特征模型; 通过模型识别模块来评估所述至少一个特征模型以选择检测模型; 以及检测模块检测新的分组数据是否属于入侵实例。

公开(公告)号：US08037533B2

公开(公告)日：2011-10-11

申请号：US12021342

申请日：2008-01-29

申请人： Cheng-Fa Tsai ,  Chia-Chen Yen

发明人： Cheng-Fa Tsai ,  Chia-Chen Yen

IPC分类号： G06F11/00 ,  G06F17/00

CPC分类号： H04L63/1425 ,  G06F21/55

摘要： A detecting method for network intrusion includes: selecting a plurality of features contained within plural statistical data by a data-transforming module; normalizing a plurality of feature values of the selected features into the same scale to obtain a plurality of normalized feature data; creating at least one feature model by a data clustering technique incorporated with density-based and grid-based algorithms through a model-creating module; evaluating the at least one feature model through a model-identifying module to select a detecting model; and detecting whether a new packet datum belongs to an intrusion instance or not by a detecting module.

摘要翻译： 一种用于网络入侵的检测方法包括：通过数据转换模块选择多个统计数据中包含的多个特征; 将所选择的特征的多个特征值归一化为相同的比例以获得多个归一化特征数据; 通过模型创建模块通过结合基于密度和基于网格的算法的数据聚类技术创建至少一个特征模型; 通过模型识别模块来评估所述至少一个特征模型以选择检测模型; 以及检测模块检测新的分组数据是否属于入侵实例。

公开(公告)号：US20080154942A1

公开(公告)日：2008-06-26

申请号：US11958461

申请日：2007-12-18

申请人： Cheng-Fa Tsai ,  Chia-Chen Yen

发明人： Cheng-Fa Tsai ,  Chia-Chen Yen

IPC分类号： G06F17/30

CPC分类号： G06F17/30979 ,  G06F17/30705

摘要： A method for grid-based data clustering comprises: creating a feature space having a plurality of cubes by a computer and showing the feature space by an interface of the computer, disposing a plurality of data stored in a database into the cubes, and then defining a plurality of the cubes as populated cubes; identifying whether the data within each of the populated cubes being evenly distributed or not to define each populated cube as a major cube or minor cube; combining border data of the minor cubes with the data in the major cubes; and designating all the data combined with each other as in the same cluster and recursively processing the above procedures to cluster all the data stored in the database.

摘要翻译： 一种用于基于网格的数据聚类的方法包括：通过计算机创建具有多个立方体的特征空间，并通过计算机的接口显示特征空间，将存储在数据库中的多个数据放置到立方体中，然后定义 多个立方体作为填充的立方体; 识别每个填充的多维数据集中的数据是否均匀分布，以将每个填充的多维数据集定义为主要立方体或次立方体; 将次立方体的边界数据与主立方体中的数据组合; 并指定在同一个集群中相互组合的所有数据，并递归地处理上述过程来集群存储在数据库中的所有数据。