基于熵的二叉树多类支持向量机的漏洞分类

doi:10.11772/j.issn.1001-9081.2014.11.3283

计算机应用 ›› 2014, Vol. 34 ›› Issue (11): 3283-3286.DOI: 10.11772/j.issn.1001-9081.2014.11.3283

基于熵的二叉树多类支持向量机的漏洞分类

张鹏,谢晓尧

贵州省信息与计算科学重点实验室(贵州师范大学),贵阳 550001

收稿日期:2014-05-26 修回日期:2014-06-26 发布日期:2014-12-01 出版日期:2014-11-01
通讯作者: 张鹏
作者简介:张鹏(1990-),男,江苏南京人,硕士研究生,主要研究方向:网络通信、信息安全;谢晓尧(1952-),男,贵州贵阳人,教授,博士,主要研究方向:网络通信、信息安全。
基金资助:
国家科技支撑计划项目

Vulnerability classification based on binary tree with entropy multi-class support vector machine

ZHANG Peng,XIE Xiaoyao

Key Laboratory of Information and Computing Science of Guizhou Province (Guizhou Normal University), Guiyang Guizhou 550001, China

Received:2014-05-26 Revised:2014-06-26 Online:2014-12-01 Published:2014-11-01
Contact: ZHANG Peng

摘要/Abstract

摘要：

为了有效提高漏洞分类的准确性,针对基于二叉树多类支持向量机分类算法的分类复杂性和分类结果依赖二叉树的结构等缺点,提出了一种基于熵的二叉树多类支持向量机的漏洞分类算法。根据定义最小超球体进行漏洞样本空间的分类,有效地通过熵的计算来描述漏洞之间的混杂程度,使得漏洞分类的计算过程被简化且能够有效减少分类结果对二叉树结构的依赖。采用公共漏洞枚举(CWE)漏洞分类体系在收集到的3000个漏洞样本上进行大量仿真实验,漏洞分类的平均准确率和平均召回率达93.3%和93.25%,高于基于二叉树多类支持向量机分类算法和K-近邻(KNN)分类算法得到的平均值。实验结果表明所提算法有效可行,能精确地实现漏洞的分类。

Abstract:

To effectively improve the accuracy of the vulnerabilities' classification, the vulnerability classification algorithm based on binary tree with entropy multi-class support vector machine was proposed to solve the insufficiency of the classification algorithm based on binary tree multi-class support vector machine, which could effectively reduce the complexity of the classification and dependence on the structure of binary tree. According to defining the smallest hyper sphere to classify the vulnerability's sample space, and used the entropy to describe the confusion degree among vulnerabilities, thus the calculation process of vulnerability classification was simplified, and the classification results' dependence on the structure of the binary tree was reduced. Experiments were conducted on 3000 vulnerabilities' samples using Common Weakness Enumeration (CWE), the average vulnerability classification accuracy and the average recall rate respectively were 93.3% and 93.25%, which were higher than those of the classification algorithm based on the binary tree multi-class support vector machine and the classification algorithm based on K-Nearest Neighbor (KNN). The experimental results indicate that the proposed algorithm is practical and feasible, it can achieve the precise vulnerability classification.

中图分类号:

张鹏谢晓尧. 基于熵的二叉树多类支持向量机的漏洞分类[J]. 计算机应用, 2014, 34(11): 3283-3286.

ZHANG Peng XIE Xiaoyao. Vulnerability classification based on binary tree with entropy multi-class support vector machine[J]. Journal of Computer Applications, 2014, 34(11): 3283-3286.

参考文献

[1]BAZAA A, ARTHUR J D. Towards a taxonomy of vulnerabilities[C]// Proceedings of the 40th Annual Hawaii International Conference on System Sciences. Piscataway: IEEE Press, 2007:163a-173a.
[2]TUPPER M. A comparison of word frequency and n-gram based vulnerability categorization using SOM[EB/OL].[2014-01-12]. http://web.cs.dal.ca/~tupper/CDMP2008.pdf.
[3]CHEN Z, ZHANG Y, CHEN Z. A categorization framework for common computer vulnerabilities and exposures [J]. The Computer Journal, 2010,53(5):551-580.
[4]MA C, GAO L, SUN Q, et al. Assessment of vulnerability threat based on fuzzy theory[J]. Application Research of Computers, 2014,31(3):815-818,824.(马驰,高岭,孙骞,等.基于模糊理论的漏洞危害等级评估[J].计算机应用研究,2014,31(3):815-818,824.)
[5]CHEN G, LIU Z. Text classification based on maximum entropy and feature aggregation[J]. Computer Applications and Software, 2008, 25(3): 263-267,277.(陈光,刘宗田.基于特征聚合与最大熵的文本分类算法[J].计算机应用与软件,2008,25(3):263-267,277.)
[6]XIE J, ZHANG B, WANG W. A partial binary tree algorithm for multi-class classification based on twin support vector machines [J]. Journal of Nanjing University: Natural Science, 2011,47(4):354-363.(谢娟英,张兵权,汪万紫.基于双支持向量机的偏二叉树多类分类算法[J].南京大学学报:自然科学版,2011,47(4):354-363.)
[7]GULINAZI, SUN T. The application of multi-class SVM based binary tree in Web text categorization[J]. Journal of Xinjiang University: Natural Science, 2011,28(1):100-104.(古丽娜孜,孙铁利.基于二叉树的多类SVM在Web文本分类中的应用研究[J].新疆大学学报:自然科学版,2011,28(1):100-104.)
[8]LONG J, WANG Y, LIU G. Research on text classification based on binary tree multi-class support vector machines [J]. Computer Systems and Applications, 2009,18(5):65-68.(龙军,王易,刘高篙.基于二叉树多类支持向量机的文本分类研究[J].计算机系统应用,2009,18(5):65-68.)
[9]LI R, LI A, CAI Y, et al. Euclidean distance based method unclassifiable region of support vector machine [J]. Journal of Computer Applications, 2010,30(2):476-478,546.(李仁兵,李艾华,蔡艳平,等.基于欧氏距离的支持向量机拒识区域解决方案[J].计算机应用,2010,30(2): 476-478,546.)
[10]SCHOLKOPF B, BURGES C, VAPNIK V. Extracting support data for a given task [C]// Proceedings of the First International Conference on Knowledge Discovery and Data mining. Madison: AAAI Press,1995:252-257.
[11]LIU J, LIU Z, XIONG Y. Improved multi-category support vector machines base on binary tree[J]. Computer Engineering and Applications,2010,46(33):117-120.(刘健,刘忠,熊鹰.改进的二叉树支持向量机多类分类算法研究[J].计算机工程与应用, 2010,46(33):117-120.)
[12]GAO Y. Design and realization on security vulnerability database[J]. Microelectronics and Computer, 2004,24(3):99-101.(高寅生.安全漏洞库设计与研究实现[J].微电子学与计算机,2004,24(3):99-101.)
[13]WANG G, XIA Y. A study on the classification of computer security vulnerability [J]. Computer Security, 2008(11):68-72.(汪贵生,夏阳.计算机安全漏洞分类研究[J].计算机安全,2008(11):68-72.)

[1]	张庆杨凡方宇涵. 基于多模态信息融合的中文拼写纠错算法[J]. 《计算机应用》唯一官方网站, 0, (): 0-0.
[2]	高颖杰, 林民, 斯日古楞null, 李斌, 张树钧. 基于片段抽取原型网络的古籍文本断句标点提示学习方法[J]. 《计算机应用》唯一官方网站, 2024, 44(12): 3815-3822.
[3]	王猛张大千周冰艳马倩影吕继东. 基于时序知识图谱补全的CTCS-3级列控车载接口设备故障诊断方法[J]. 《计算机应用》唯一官方网站, 0, (): 0-0.
[4]	杨青朱焱. 改进语言规则中的表示的隐喻识别技术[J]. 《计算机应用》唯一官方网站, 0, (): 0-0.
[5]	余婧陈艳平扈应黄瑞章秦永彬. 结合实体边界偏移的序列标注优化方法[J]. 《计算机应用》唯一官方网站, 0, (): 0-0.
[6]	张伟牛家祥马继超沈琼霞. 深层语义特征增强的ReLM中文拼写纠错模型[J]. 《计算机应用》唯一官方网站, 0, (): 0-0.
[7]	徐章杰陈艳平扈应黄瑞章秦永彬. 联合边界生成的多目标学习嵌套命名实体识别[J]. 《计算机应用》唯一官方网站, 0, (): 0-0.
[8]	代震龙韩萌杨文艳朱诗能杨书蓉. 序列模式挖掘综述[J]. 《计算机应用》唯一官方网站, 0, (): 0-0.
[9]	徐乐黄瑞章白瑞娜秦永彬. 基于意图正则化的深度半监督文本聚类[J]. 《计算机应用》唯一官方网站, 0, (): 0-0.
[10]	彭一峰朱焱. 结合预处理方法和对抗学习的公平链接预测[J]. 《计算机应用》唯一官方网站, 0, (): 0-0.
[11]	赵彪秦玉华田荣坤胡月航陈芳锐. 依赖类型及距离增强的方面级情感分析模型[J]. 《计算机应用》唯一官方网站, 0, (): 0-0.
[12]	任登燃王淑营. 基于差分边界增强的风电装备嵌套实体识别模型[J]. 《计算机应用》唯一官方网站, 0, (): 0-0.
[13]	田海燕黄赛豪张栋李寿山. 视觉指导的分词和词性标注[J]. 《计算机应用》唯一官方网站, 0, (): 0-0.
[14]	帅健王中卿陈嘉沥. 基于代码生成的细粒度情感分析方法[J]. 《计算机应用》唯一官方网站, 0, (): 0-0.
[15]	姜雨杉, 张仰森. 大语言模型驱动的立场感知事实核查[J]. 《计算机应用》唯一官方网站, 2024, 44(10): 3067-3073.

基于熵的二叉树多类支持向量机的漏洞分类

Vulnerability classification based on binary tree with entropy multi-class support vector machine

PDF

可视化

摘要/Abstract

引用本文

使用本文

参考文献

相关文章 15

编辑推荐

Metrics