基于支持向量机和遗传算法融合的入侵检测

Network Intrusion Detection Based on the Integration of SVM and Genetic Algorithm

为了研究网络异常入侵检测问题,将支持向量机(SVM)和遗传(GA)算法融合并应用于入侵检测领域,区分正常和异常的用户行为,实现对网络系统的入侵检测。传统SVM算法易产生训练参数选择不当,难以获得较高的检测效率和分类精度等问题。针对此问题,提出了一种优化的基于SVM-GA融合的入侵检测方法,首先对网络入侵数据进行归一化处理简化输入,然后通过遗传算法对SVM训练参数进行同步优化,最后采用SVM算法对网络数据进行检测,分类识别得到网络入侵结果。仿真实验结果表明,该融合算法训练时间短、检测精度高、误报率和漏报率低,是一种有效可行的入侵检测方法。

The purpose of this paper is to do research on the problems of network intru- sion detection. Integration of the SVM and GA algorithms are applied to the intrusion detection field to distinct the normal and abnormal user behaviors, for network intrusion detection system. Traditional SVM algorithm is easy to produce the inappropriate choice of training parameters, which is difficult to obtain high detection efficiency and classifi- cation accuracy. In response to these problems, we propose a SVM-GA based optimiza- tion of the integration of intrusion detection, which firstly normalizes the network intru- sion data to simplify the input, then optimizes SVM training parameters simultaneously with the genetic algorithm, and finally detects network intrusion making the use of SVM algorithm to achieve the classification and reorganization results. Simulation re- sults show that the fusion algorithm have shorter training time, higher accuracy, lower false positive and false negative rate, which is a feasible and effective network intrusion detection method.