计算机应用 ›› 2010, Vol. 30 ›› Issue (11): 3051-3052.

• 信息安全 • 上一篇    下一篇

网格和密度聚类算法在入侵检测中的应用

王翠娥1,于晓明2   

  1. 1. 陕西省西安市北郊未央大学园区陕西科技大学电气与信息工程学院
    2. 陕西科技大学
  • 收稿日期:2010-05-17 修回日期:2010-07-14 发布日期:2010-11-05 出版日期:2010-11-01
  • 通讯作者: 王翠娥
  • 基金资助:
    咸阳市科研计划项目

Application of clustering algorithm based on density and grid in intrusion detection

  • Received:2010-05-17 Revised:2010-07-14 Online:2010-11-05 Published:2010-11-01
  • Contact: wang cuie

摘要: 针对现有入侵检测算法中普遍存在的对输入顺序敏感的问题,提出了将网格和密度相结合的聚类算法应用到入侵检测中。该算法在CLIQUE基础上进行了改进,将非密集单元向密集单元移动,克服了CLIQUE算法聚类结果精确性不高的缺点。该算法结合了网格聚类的低时空复杂度和密度聚类的良好抗噪性的特点。仿真实验中采用了KDD-CUP99的测试数据集,实验结果证实了该算法的有效性和可行性。

关键词: 聚类, 网格, 密度, 入侵检测, 数据挖掘

Abstract: After discussing some problems in the current intrusion detection techniques, an intrusion detection method that applies cluster algorithm based on the density and grid was proposed. This algorithm shifted from non-dense part to dense part based on CLIQUE. Inaccuracy of clustering result of CLIQUE algorithm was avoided. The algorithm has the merit of grid-based clustering which is of low-complexity in time and space, and has the merit of density-based clustering which is of good noise immunity. Using the data sets of KDDCUP99, the results of simulation experiments show the effectiveness and feasibility of the clustering algorithm.

Key words: clustering, grid, density, intrusion detection, data mining