An efficient algorithm for frequent pattern in intrusion detection

In data mining-based intrusion detection system, we should make use of particular domain knowledge in relation to intrusion detection in order to efficiently extract relative rules from large amounts of audit records. This paper first gives a summary of the basic association rule algorithm and episode rule algorithm, then improves the basic algorithm considering the characteristic of audit records.