Title :
Efficiency Issues of Rete-Based Expert Systems for Misuse Detection
Author :
Meier, Michael ; Flegel, Ulrich ; Schmerl, Sebastian
Author_Institution :
Univ. of Dortmund, Dortmund
Abstract :
This paper provides a general and comprehensive approach to implementing misuse detection on expert systems and an in-depth analysis of the effectiveness of the optimization strategies of the Rete algorithm wrt. the general implementation approach. General efficiency limits of Rete- based expert systems in the domain of misuse detection are determined analytically and validated experimentally. We conclude that expert systems may still have their merit in rapid prototyping of misuse detection IDSs, but they should not be considered for modern production systems.
Keywords :
expert systems; optimisation; security of data; Rete-based expert systems; misuse detection; optimization strategy; Algorithm design and analysis; Application software; Computer science; Computer security; Expert systems; Intrusion detection; Production systems; Proposals; Prototypes; Standards development;
Conference_Titel :
Computer Security Applications Conference, 2007. ACSAC 2007. Twenty-Third Annual
Conference_Location :
Miami Beach, FL
Print_ISBN :
978-0-7695-3060-4
DOI :
10.1109/ACSAC.2007.22
