A Neural Network Approach for Misuse and Anomaly Intrusion Detection

An MI.P(Multi-Layer Perception)/Elman neural network is proposed in thispaper, which realizes classification with memory of past events using the real-time classificationof MI.P and the memorial functionality of Elman. The system's sensitivity for the memory of pastevents ean be easily reconfigured without retraining the whole network. This approach can he usedfor both misuse and anomaly detection system. The intrusion detection systems(TDSs) using the hybridMLP/Elman neural network are evaluated by the intrusion detection evaluation data sponsored by U.S.Defense Advanced Research Projects Agency CDARPA) Ihc results of experiment are presented inReceiver Operating Characteristic CROC) curves. Thc capabilites of these IDSs to identify DenyofService(DOS) and probing attacks are enhanced.

混合神经网络在入侵检测系统中的应用研究

提出一种基于MLP和Elman混合神经网络模型的入侵检测系统,旨在利用混合神经网络解决入侵检测问题。本模型具有记忆功能,可以有效地检测离散而又相联系的攻击行为。MLP网络是一个实时的模式分类器,而Elman网络实现了对事件的记忆能力。基于此混合模型的入侵检测系统使用DARPA数据集进行测试评估。实验证明基于此混合模型的入侵检测系统能够有效地提高检测率,降低误报率。