入侵检测是用来发现网络外部攻击与合法用户滥用特权的一种方法。数据挖掘技术是一种决策支持过程。它能高度自动化地分析原有的数据 ,做出归纳性的推理 ,从中挖掘出潜在的模式 ,预测出客户的行为。根据数据挖掘技术在入侵检测中的应用情况 ,可采用关联规则技术实地建立了一个网络行为模式规则库 Intrusion detection is a method used to detect outside attacks on the network and abuse of privilege by legitimate users. Data mining is a decision support process. It can automatically analyze the original data, make inductive reasoning, dig out the potential model, predict customer behavior. According to the data mining technology in the application of intrusion detection, association rules can be used in the field to establish a network behavior pattern rule base