Network intrusion detection based on particle swarm optimization algorithm and information gain

doi:10.11772/j.issn.1001-9081.2014.06.1686

Journal of Computer Applications ›› 2014, Vol. 34 ›› Issue (6): 1686-1688.DOI: 10.11772/j.issn.1001-9081.2014.06.1686

Previous Articles Next Articles

Network intrusion detection based on particle swarm optimization algorithm and information gain

HUANG Huiqun¹,²,SUN Hong²

1. Department of Information Management, Hunan University of Finance and Economics, Changsha Hunan 410205, China
2. School of Public Health, Central South University, Changsha Hunan 410078, China;

Received:2013-12-13 Revised:2014-01-25 Online:2014-07-02 Published:2014-06-01
Contact: HUANG Huiqun

粒子群选择特征和信息增益确定特征权值的入侵检测

黄会群¹,²,孙虹²

1. 湖南财政经济学院信息管理系, 长沙 410205
2. 中南大学公共卫生学院, 长沙 410078;

通讯作者: 黄会群
作者简介:黄会群 (1976-),男,湖南蓝山人,讲师, 博士研究生,主要研究方向:数据挖掘、入侵检测、综合评价;孙虹(1957-),男,湖南邵阳人,教授,博士生导师,博士,主要研究方向:综合评价。
基金资助:
湖南省教育厅科研项目

Abstract

Abstract:

In order to improve the detection accuracy of network intrusion, a network intrusion detection model named PSO-IG was proposed based on Particle Swarm Optimization (PSO) algorithm and Information Gain (IG). Firstly, PSO algorithm was used to eliminate redundant features of original network data, and then the weight values of selection features were obtained using IG, and Support Vector Machine (SVM) was used to establish intrusion detection model. Finally, the KDD CUP 99 dataset was used to test the performance of PSO-IG. The results show that the proposed model can eliminate redundant features and reduce the input dimension to improve the detection speed of network intrusion, and it can improve the network intrusion detection accuracy by reasonable selecting weight values.

摘要：

为了提高网络入侵检测正确率,提出一种粒子群算法(PSO)选择特征和信息增益(IG)法确定特征权值的网络入侵检测模型(PSO-IG)。首先采用PSO选择网络入侵特征子集,消除冗余特征;然后采用IG法确定特征子集中的特征权重,并采用支持向量机(SVM)建立分类模型;最后采用KDD CUP 99 数据集对PSO-IG的性能进行测试。测试结果表明:PSO-IG消除了冗余特征,降低了输入维数,提高了网络入侵检测速度;通过合理确定特征权值,提高了入侵检测正确率。

CLC Number:

TP301.6

HUANG Huiqun SUN Hong. Network intrusion detection based on particle swarm optimization algorithm and information gain[J]. Journal of Computer Applications, 2014, 34(6): 1686-1688.

黄会群孙虹. 粒子群选择特征和信息增益确定特征权值的入侵检测[J]. 计算机应用, 2014, 34(6): 1686-1688.

References

[1]YAN X, TAN M, YAN Y, et al. Research on hidden Markov model-based and neural network-based intrusion detections[J]. Computer Applications and Software, 2012, 29(2):294-297.(闫新娟,谭敏生,严亚周,等. 基于隐马尔可夫模型和神经网络的入侵检测研究[J]. 计算机应用与软件,2012,29(2):294-297.)
[2]JIANG C, ZHANG G, LI Z. Abnormal intrusion detection for embedded network system based on genetic algorithm optimised SVM[J]. Computer Applications and Software, 2011,28(2):287-289.(姜春茂,张国印,李志聪. 基于遗传算法优化SVM的嵌入式网络系统异常入侵检测[J]. 计算机应用与软件,2011,28(2):287-289.)
[3]JING X, WANG H, NIE K, et al. Feature selection algorithm based on IMGA and MKSVM to intrusion detection[J].Computer Science, 2012,39(7):96-100. (井小沛,汪厚祥,聂凯,等. 面向入侵检测的基于IMGA和MKSVM的特征选择算法[J]. 计算机科学,2012,39(7):96-100.)
[4]MU Q, BI X, SHE X. Feature selection method for network intrusion based on GQPSO algorithm[J].Computer Engineering,2011,37(14):103-16.(牟琦,毕孝儒,厍向阳. 基于GQPSO算法的网络入侵特征选择方法[J]. 计算机工程,2011,37(14):103-16.)
[5]DENNING D E. An intrusion detection model [J]. IEEE Transactions on Software Engineering, 2010, 13(2): 222-232.
[6]HANG C L, WANG C J. A GA-based feature selection and parameters optimization for support vector machines [J]. Expert Systems with Applications, 2009, 31(2):231-240.
[7]WANG H, MA R. Optimization of neural networks for network intrusion detection[C]// ETCS 2009: Proceedings of the 1st International Workshop on Education Technology and Computer Science. Piscataway: IEEE Press, 2009:418-420.
[8]ZHANG X, GU C. A method to extract network intrusion detection feature[J]. Journal of South China University of Technology: Natural Science, 2010,38(1):81-85(张雪芹,顾春华. 一种网络入侵检测特征提取方法[J]. 华南理工大学学报:自然科学版,2010,38(1):81-85.)
[9]GUO W, CHEN G, CHEN Q, et al. Feature subset selection based on particle swarm optimization algorithm and relevance analysis[J]. Computer Science, 2008, 35(2):144-146.(郭文忠,陈国龙,陈庆良,等. 基于粒子群优化算法和相关性分析的特征子集选择[J]. 计算机科学,2008,35(2):144-146.)
[10]MUKHERJEE B, HEBERLEIN L T, LEVITT K N. Network intrusion detection [J]. IEEE Network, 1994, 8(3):26-41.
[11]MITRA P, MURTHY C A, PAL S K. Unsupervised feature selecdonusing feature similarity[J]. IEEE Transactions on Pattern Analysis and Machine Intelligence, 2002,3(14):301-312.
[12]CHEN S, CHEN G, GUO W, et al. Feature selection of the intrusion detection data based on particle swarm optimization and neighborhood reduction[J]. Journal of Computer Research and Development, 2010,47(7);1261-1267(陈仕涛,陈国龙,郭文忠,等. 基于粒子群优化和邻域约简的入侵检测日志数据特征选择[J]. 计算机研究与发展,2010,47(7);1261-1267.)
[13]LI Y, FANG B, GUO L, et al. Network anomaly detection based on TCM-KNN and genetic algorithm[J]. Journal on Communications, 2007,28(12):48-52.(李洋,方滨兴,郭莉,等. 基于TCM-KNN和遗传算法的网络异常检测技术[J].通信学报,2007,28(12):48-52.)

[1]	. YOLOv5s-MRD: an efficient fire and smoke detection algorithm for complex scenarios based on YOLOv5s [J]. Journal of Computer Applications, 0, (): 0-0.
[2]	Qiye ZHANG, Xinrui ZENG. Efficient active-set method for support vector data description problem with Gaussian kernel [J]. Journal of Computer Applications, 2024, 44(12): 3808-3814.
[3]	. Path planning of multi-UAV formation based on improved artificial potential field method [J]. Journal of Computer Applications, 0, (): 0-0.
[4]	. Dual-population dual-stage evolutionary algorithm for complex constrained multi-objective optimization problems [J]. Journal of Computer Applications, 0, (): 0-0.
[5]	Qin LENG, Zhengyuan MAO. Two echelon location-routing optimization considering facility sizing decision [J]. Journal of Computer Applications, 2024, 44(11): 3513-3520.
[6]	Qingyuan PENG, Xiaofeng WANG, Junxia WANG, Yingying HUA, Ao TANG, Fei HE. Review of phase transition in satisfiability problems [J]. Journal of Computer Applications, 2024, 44(11): 3503-3512.
[7]	Renke SUN, Zhiyu HUANGFU, Hu CHEN, Zhongnian LI, Xinzheng XU. Survey of neural architecture search [J]. Journal of Computer Applications, 2024, 44(10): 2983-2994.
[8]	Antai SUN, Ye LIU, Dongmei XU. Dynamic surface asymptotic compensation algorithm for multi-agent systems [J]. Journal of Computer Applications, 2024, 44(10): 3151-3157.
[9]	Chaoying YAN, Ziyi ZHANG, Yingnan QU, Qiuyu LI, Dixiang ZHENG, Lijun SUN. Double auction carbon trading based on consortium blockchain [J]. Journal of Computer Applications, 2024, 44(10): 3240-3245.
[10]	. Dung beetle optimizer algorithm with restricted reverse learning and Cauchy-Gauss variation [J]. Journal of Computer Applications, 0, (): 0-0.
[11]	Guanglei YAO, Juxia XIONG, Guowu YANG. Flower pollination algorithm based on neural network optimization [J]. Journal of Computer Applications, 2024, 44(9): 2829-2837.
[12]	Shanglong LI, Jianhua LIU, Heming JIA. Reptile search algorithm based on multi-hunting coordination strategy [J]. Journal of Computer Applications, 2024, 44(9): 2818-2828.
[13]	Yan LI, Dazhi PAN, Siqing ZHENG. Improved adaptive large neighborhood search algorithm for multi-depot vehicle routing problem with time window [J]. Journal of Computer Applications, 2024, 44(6): 1897-1904.
[14]	. Robust shapeles representation method for time series [J]. Journal of Computer Applications, 0, (): 0-0.
[15]	HU Linbo , NI Zhiwei , CHENG Jiale, LIU Wentao , ZHU Xuhui , . Complex collaborative crowdsourcing task allocation method based on fusion community detection [J]. Journal of Computer Applications, 0, (): 0-0.

Network intrusion detection based on particle swarm optimization algorithm and information gain

粒子群选择特征和信息增益确定特征权值的入侵检测

PDF

Knowledge

Abstract

Cite this article

share this article

References

Related Articles 15

Recommended Articles

Metrics