The Research of Association Rules Mining and Application in Intrusion Alerts Analysis

In allusion to the efficiency problem of the actual association rules mining algorithms in the process of disposing massive data, an improved one LRE based on one-dimensional linked list is put forward in this paper. And these tests show that LRE takes priority of apriori and FP-growth algorithms in implement efficiency. To resolve the large number of alerts and the high false positive rate issues, it constructs an intrusion alerts analysis system model (IAAS) with LRE applied. Finally, the validity in the aspect of reducing the number of alerts and the false positive rate has been showed by the experiments.