The application of the detection and data mining algorithm optimization in Honeynet

A technical scheme, which can properly arrange IDS and optimally apply the algorithms of detection and data mining to the Honeynet environment, is proposed in the building automation system completed by the author recently. In this specific environment, the position of IDS is deployed reasonably and the anomaly and misuse detection algorithm of IDS is designed and selected optimally. Meanwhile, the misuse detection rules are updated dynamically with the combination of data-mining association rule algorithm. The design makes the classical and mature algorithms display their technical characteristics and advantages to the largest extent in the project and enable the honeynet to protect the internal control network as expected.