針對審計日志記錄的特性，本文提出了一種基于聚集信息矩陣的高效增量式關聯規則的挖掘算法，并解決了當最小支持度改變以及審計數據動態更新時相應的關聯規則的更新問題。算法提高了審計日志數據庫關聯規則挖掘的效率，更加適用于入侵檢測系統，能基本滿足實時入侵檢測系統的需要。
關鍵詞：入侵檢測；關聯規則挖掘；聚集信息矩陣；關聯向量
Abstract: Corresponding to characteristic of the audit record, this paper proposes a high efficiency incremental association mining algorithm based on information collecting matrix. The algorithm resolve the problem that how to update the association rules in a database when minimum support changed or new transactions are added to the database. The algorithm improves the efficiency of the association mining, can fulfill the request if the real time system and apply to intrusion detection system.
Key words: Intrusion detection; Association mining; Information collecting matrix; Association vector