This paper presents an qproach to detect intrusion based on data mining framework. In the framework, intrusion detection is thought of as a classification. The central idea is to utilize auditing programs to extract an extensive set of features that describe each network connection or host session, and apply data mining programs to learn rules that accurately capture the behavior of intrusions and normal activities. These rules can then be used for misuse detection and anomaly detection. We

more »

... ide the results from the experiments in using classification on rea!-world traffic data.