Table 1 shows the variation of the minimum support min_sup and the minimum confidence min_conf are relatively
small, the cluster rule set can cover all intrusion, at this time, the detection rate will be relatively high, but the rule
number is relatively large, which will influence the detection speed.