Study on ontology-based intrusion detection

Meeting distributed detection´s requirements of accuracy, expansibility and portability, ontology is introduced to organize and systematize all intrusion detection behavior at any level, consequently reducing ambiguity and supporting share. The paper presented ontology-based intrusion detection model with advantages of hierarchical and cooperative models, and then the deduction of expert system was used to detect the complex attacks.