The Application Of Plan Recognition In The Automated Intrusion System

Intelligent plan recognition is an active research area in artificial intelligence. It has been applied into many research fields such as natural language understanding, knowledge reasoning, agent help and so on. Especially nowadays some scholars combined plan recognition with intrusion detection systems in internet security research and got very good results.Intrusion detection system is to detect intrusion action according to the analysis of host or network activity gathered. Intrusion detection system is classified to based-on host IDS and based-on network IDS.IDS technology is a new generation of security different from tradition security technology. Now research on IDS is focused on intrusion protection and intrusion detection. Intrusion response is mainly implemented in IDS, which limits the performance of response method and response ability. Foreign scholars have carried out research on intrusion response systems and models. With a large amount of network attacks, the intrusion response systems can actively protect the compromised systems and minimize the loss of the system after the intrusion happened.With research on plan recognition and intrusion detection system theory, based-on attribute of plan recognition predicting agent future actions, this paper proposes the idea of using plan recognition in IDS, then gives the plan recognition model in the automated intrusion response system. This model can not only recognize the goal of hostile intrusion plan and the future hostile actions, but also give response action to the actions and even future hostile actions. Thus the model improves the safety of computer system and the Internet domain.