粒子群选择特征和信息增益确定特征权值的入侵检测

doi:10.11772/j.issn.1001-9081.2014.06.1686

计算机应用 ›› 2014, Vol. 34 ›› Issue (6): 1686-1688.DOI: 10.11772/j.issn.1001-9081.2014.06.1686

粒子群选择特征和信息增益确定特征权值的入侵检测

黄会群¹,²,孙虹²

1. 湖南财政经济学院信息管理系, 长沙 410205
2. 中南大学公共卫生学院, 长沙 410078;

收稿日期:2013-12-13 修回日期:2014-01-25 出版日期:2014-06-01 发布日期:2014-07-02
通讯作者: 黄会群
作者简介:黄会群 (1976-),男,湖南蓝山人,讲师, 博士研究生,主要研究方向:数据挖掘、入侵检测、综合评价;孙虹(1957-),男,湖南邵阳人,教授,博士生导师,博士,主要研究方向:综合评价。
基金资助:
湖南省教育厅科研项目

Network intrusion detection based on particle swarm optimization algorithm and information gain

HUANG Huiqun¹,²,SUN Hong²

1. Department of Information Management, Hunan University of Finance and Economics, Changsha Hunan 410205, China
2. School of Public Health, Central South University, Changsha Hunan 410078, China;

Received:2013-12-13 Revised:2014-01-25 Online:2014-06-01 Published:2014-07-02
Contact: HUANG Huiqun

摘要/Abstract

摘要：

为了提高网络入侵检测正确率,提出一种粒子群算法(PSO)选择特征和信息增益(IG)法确定特征权值的网络入侵检测模型(PSO-IG)。首先采用PSO选择网络入侵特征子集,消除冗余特征;然后采用IG法确定特征子集中的特征权重,并采用支持向量机(SVM)建立分类模型;最后采用KDD CUP 99 数据集对PSO-IG的性能进行测试。测试结果表明:PSO-IG消除了冗余特征,降低了输入维数,提高了网络入侵检测速度;通过合理确定特征权值,提高了入侵检测正确率。

Abstract:

In order to improve the detection accuracy of network intrusion, a network intrusion detection model named PSO-IG was proposed based on Particle Swarm Optimization (PSO) algorithm and Information Gain (IG). Firstly, PSO algorithm was used to eliminate redundant features of original network data, and then the weight values of selection features were obtained using IG, and Support Vector Machine (SVM) was used to establish intrusion detection model. Finally, the KDD CUP 99 dataset was used to test the performance of PSO-IG. The results show that the proposed model can eliminate redundant features and reduce the input dimension to improve the detection speed of network intrusion, and it can improve the network intrusion detection accuracy by reasonable selecting weight values.

中图分类号:

TP301.6

黄会群孙虹. 粒子群选择特征和信息增益确定特征权值的入侵检测[J]. 计算机应用, 2014, 34(6): 1686-1688.

HUANG Huiqun SUN Hong. Network intrusion detection based on particle swarm optimization algorithm and information gain[J]. Journal of Computer Applications, 2014, 34(6): 1686-1688.

参考文献

[1]YAN X, TAN M, YAN Y, et al. Research on hidden Markov model-based and neural network-based intrusion detections[J]. Computer Applications and Software, 2012, 29(2):294-297.(闫新娟,谭敏生,严亚周,等. 基于隐马尔可夫模型和神经网络的入侵检测研究[J]. 计算机应用与软件,2012,29(2):294-297.)
[2]JIANG C, ZHANG G, LI Z. Abnormal intrusion detection for embedded network system based on genetic algorithm optimised SVM[J]. Computer Applications and Software, 2011,28(2):287-289.(姜春茂,张国印,李志聪. 基于遗传算法优化SVM的嵌入式网络系统异常入侵检测[J]. 计算机应用与软件,2011,28(2):287-289.)
[3]JING X, WANG H, NIE K, et al. Feature selection algorithm based on IMGA and MKSVM to intrusion detection[J].Computer Science, 2012,39(7):96-100. (井小沛,汪厚祥,聂凯,等. 面向入侵检测的基于IMGA和MKSVM的特征选择算法[J]. 计算机科学,2012,39(7):96-100.)
[4]MU Q, BI X, SHE X. Feature selection method for network intrusion based on GQPSO algorithm[J].Computer Engineering,2011,37(14):103-16.(牟琦,毕孝儒,厍向阳. 基于GQPSO算法的网络入侵特征选择方法[J]. 计算机工程,2011,37(14):103-16.)
[5]DENNING D E. An intrusion detection model [J]. IEEE Transactions on Software Engineering, 2010, 13(2): 222-232.
[6]HANG C L, WANG C J. A GA-based feature selection and parameters optimization for support vector machines [J]. Expert Systems with Applications, 2009, 31(2):231-240.
[7]WANG H, MA R. Optimization of neural networks for network intrusion detection[C]// ETCS 2009: Proceedings of the 1st International Workshop on Education Technology and Computer Science. Piscataway: IEEE Press, 2009:418-420.
[8]ZHANG X, GU C. A method to extract network intrusion detection feature[J]. Journal of South China University of Technology: Natural Science, 2010,38(1):81-85(张雪芹,顾春华. 一种网络入侵检测特征提取方法[J]. 华南理工大学学报:自然科学版,2010,38(1):81-85.)
[9]GUO W, CHEN G, CHEN Q, et al. Feature subset selection based on particle swarm optimization algorithm and relevance analysis[J]. Computer Science, 2008, 35(2):144-146.(郭文忠,陈国龙,陈庆良,等. 基于粒子群优化算法和相关性分析的特征子集选择[J]. 计算机科学,2008,35(2):144-146.)
[10]MUKHERJEE B, HEBERLEIN L T, LEVITT K N. Network intrusion detection [J]. IEEE Network, 1994, 8(3):26-41.
[11]MITRA P, MURTHY C A, PAL S K. Unsupervised feature selecdonusing feature similarity[J]. IEEE Transactions on Pattern Analysis and Machine Intelligence, 2002,3(14):301-312.
[12]CHEN S, CHEN G, GUO W, et al. Feature selection of the intrusion detection data based on particle swarm optimization and neighborhood reduction[J]. Journal of Computer Research and Development, 2010,47(7);1261-1267(陈仕涛,陈国龙,郭文忠,等. 基于粒子群优化和邻域约简的入侵检测日志数据特征选择[J]. 计算机研究与发展,2010,47(7);1261-1267.)
[13]LI Y, FANG B, GUO L, et al. Network anomaly detection based on TCM-KNN and genetic algorithm[J]. Journal on Communications, 2007,28(12):48-52.(李洋,方滨兴,郭莉,等. 基于TCM-KNN和遗传算法的网络异常检测技术[J].通信学报,2007,28(12):48-52.)

[1]	肖智豪胡志华朱琳. 求解冷链物流时间依赖型车辆路径问题的混合自适应大邻域搜索算法[J]. 计算机应用, 0, (): 0-0.
[2]	沙林秀，聂凡，高倩，孟号. 基于布朗运动与梯度信息的交替优化算法[J]. 计算机应用, 0, (): 0-0.
[3]	董永峰孙跃华高立超韩鹏季海鹏. 基于改进一维卷积和双向长短期记忆神经网络的故障诊断方法[J]. 计算机应用, 0, (): 0-0.
[4]	李大海刘庆腾艾志刚王振东. 基于动态D向分割和混沌扰动的阴阳对算法[J]. 计算机应用, 0, (): 0-0.
[5]	雷鹰郑万波魏嵬夏云霓李晓波刘诚武谢洪. 基于概率性能感知演化博弈策略的混合“云+边”环境中任务卸载方法 [J]. 计算机应用, 0, (): 0-0.
[6]	乔钢柱王瑞孙超利. 基于分解的高维多目标改进进化算法[J]. 计算机应用, 0, (): 0-0.
[7]	朱诚潘旭华张勇. 基于趋化校正的哈里斯鹰优化算法[J]. 计算机应用, 0, (): 0-0.
[8]	平凡汤小春潘彦宇李战怀. 不规则任务在图形处理器集群上的调度策略[J]. 计算机应用, 0, (): 0-0.
[9]	杨杰张名扬芮晓彬王志晓. 融合节点覆盖范围和结构洞的影响力最大化算法[J]. 计算机应用, 0, (): 0-0.
[10]	汤安迪, 韩统, 徐登武, 谢磊. 混沌精英哈里斯鹰优化算法[J]. 计算机应用, 2021, 41(8): 2265-2272.
[11]	李蒙蒙, 秦伟, 刘艺, 刁兴春. 结合头脑风暴优化的混合蚁群优化算法[J]. 计算机应用, 2021, 41(8): 2412-2417.
[12]	张闻强, 邢征, 杨卫东. 基于多区域采样策略的混合粒子群优化求解多目标柔性作业车间调度问题[J]. 计算机应用, 2021, 41(8): 2249-2257.
[13]	张祥飞, 鲁宇明, 张平生. 基于协同进化的约束多目标优化算法[J]. 计算机应用, 2021, 41(7): 2012-2018.
[14]	张萌, 李维华. 用户互动表示下的影响力最大化算法[J]. 计算机应用, 2021, 41(7): 1964-1969.
[15]	王宇, 刘燕丽, 陈劭武. 基于顶点冲突学习的最大公共子图算法[J]. 计算机应用, 2021, 41(6): 1756-1760.

粒子群选择特征和信息增益确定特征权值的入侵检测

Network intrusion detection based on particle swarm optimization algorithm and information gain

PDF

可视化

摘要/Abstract

引用本文

使用本文

参考文献

相关文章 15

编辑推荐

Metrics