TY - JOUR T1 - An Intrusion Detection Expert System with Fact-Base AU - , Yuan Yuan AU - , Dai Guanzhong JO - Asian Journal of Information Technology VL - 6 IS - 5 SP - 614 EP - 617 PY - 2007 DA - 2001/08/19 SN - 1682-3915 DO - ajit.2007.614.617 UR - https://makhillpublications.co/view-article.php?doi=ajit.2007.614.617 KW - Linux KW -FIDES KW -fact-base KW -misuse detection KW -anomaly detection KW -expert KW -system KW -intrustion AB - This study designs an intrusion detection expert system with fact-base(FIDES) which includes some important files and directories that are vulnerable to certain types of attack scenarios. FIDES matches and categorizes audit data with fact-base component. Inference component of FIDES adopts misuse detection techniques or anomaly detection technique for different audit data according to the result of categorization. The experiments show that FIDES could estimate the unknown user activity accurately and the False Negative Rate and the False Positive Rate have been reduced effectively. ER -