Intrusion detection is a serious and complex problem.Undoubtedly due to a large number of attacks around the world,the concept of intrusion detection has become very important.This research proposes a multilayer bioin...Intrusion detection is a serious and complex problem.Undoubtedly due to a large number of attacks around the world,the concept of intrusion detection has become very important.This research proposes a multilayer bioinspired feature selection model for intrusion detection using an optimized genetic algorithm.Furthermore,the proposed multilayer model consists of two layers(layers 1 and 2).At layer 1,three algorithms are used for the feature selection.The algorithms used are Particle Swarm Optimization(PSO),Grey Wolf Optimization(GWO),and Firefly Optimization Algorithm(FFA).At the end of layer 1,a priority value will be assigned for each feature set.At layer 2 of the proposed model,the Optimized Genetic Algorithm(GA)is used to select one feature set based on the priority value.Modifications are done on standard GA to perform optimization and to fit the proposed model.The Optimized GA is used in the training phase to assign a priority value for each feature set.Also,the priority values are categorized into three categories:high,medium,and low.Besides,the Optimized GA is used in the testing phase to select a feature set based on its priority.The feature set with a high priority will be given a high priority to be selected.At the end of phase 2,an update for feature set priority may occur based on the selected features priority and the calculated F-Measures.The proposed model can learn and modify feature sets priority,which will be reflected in selecting features.For evaluation purposes,two well-known datasets are used in these experiments.The first dataset is UNSW-NB15,the other dataset is the NSL-KDD.Several evaluation criteria are used,such as precision,recall,and F-Measure.The experiments in this research suggest that the proposed model has a powerful and promising mechanism for the intrusion detection system.展开更多
Support vector machine (SVM) technique has recently become a research focus in intrusion detection field for its better generalization performance when given less priori knowledge than other soft-computing techniques....Support vector machine (SVM) technique has recently become a research focus in intrusion detection field for its better generalization performance when given less priori knowledge than other soft-computing techniques. But the randomicity of parameter selection in its implement often prevents it achieving expected performance. By utilizing genetic algorithm (GA) to optimize the parameters in data preprocessing and the training model of SVM simultaneously, a hybrid optimization algorithm is proposed in the paper to address this problem. The experimental results demonstrate that it’s an effective method and can improve the performance of SVM-based intrusion detection system further.展开更多
针对现有网络入侵检测方法的不足,提出了一种新的网络入侵检测方法——GATS-LSVM算法。该方法采用遗传算法(GA)与禁忌搜索(TS)相混合的搜索策略对特征子集空间进行随机搜索,利用提供的数据在无约束优化线性支持向量机(LSVM)上的分类错...针对现有网络入侵检测方法的不足,提出了一种新的网络入侵检测方法——GATS-LSVM算法。该方法采用遗传算法(GA)与禁忌搜索(TS)相混合的搜索策略对特征子集空间进行随机搜索,利用提供的数据在无约束优化线性支持向量机(LSVM)上的分类错误率作为特征子集的评估标准获取最优特征子集,从而有效地对入侵进行检测。大量基于著名的KDD Cup 1999数据集的实验表明,该新方法相对于其它一些传统的网络入侵检测方法,能在保证较高检测率的前提下,有效地降低误报率、入侵检测的计算复杂度和提高检测速度,能更适用于现实高速网络应用环境。展开更多
研究入网络安全的入侵检测问题。针对网络入侵数据的高维、非线性和冗余特点,传统降维和检测方法检测率低的难题,为了提高网络安全性,提出一种基于主成分分析的遗传神经网络网络入侵检测方法。首先对网络入侵的数据维数利用主成分分析...研究入网络安全的入侵检测问题。针对网络入侵数据的高维、非线性和冗余特点,传统降维和检测方法检测率低的难题,为了提高网络安全性,提出一种基于主成分分析的遗传神经网络网络入侵检测方法。首先对网络入侵的数据维数利用主成分分析进行降维处理,消除数据之间的冗余信息,简化神经网络的输入,然后采用遗传算法对神经网络的权值进行优化,加快神经网络的学习速度,最后采用优化的神经网络模型对主成分分析后的数据进行检测,捕捉网络入侵数据的非线性规律。通过网络入侵KDD CUP 99数据集对该算法进行验证性实验,实验结果表明,相对于其它网络入侵检测方法,该方法学习速度快,检测正确率高、漏报率与误报率低,是一种高效、实时好的网络入侵检测方法。展开更多
文摘Intrusion detection is a serious and complex problem.Undoubtedly due to a large number of attacks around the world,the concept of intrusion detection has become very important.This research proposes a multilayer bioinspired feature selection model for intrusion detection using an optimized genetic algorithm.Furthermore,the proposed multilayer model consists of two layers(layers 1 and 2).At layer 1,three algorithms are used for the feature selection.The algorithms used are Particle Swarm Optimization(PSO),Grey Wolf Optimization(GWO),and Firefly Optimization Algorithm(FFA).At the end of layer 1,a priority value will be assigned for each feature set.At layer 2 of the proposed model,the Optimized Genetic Algorithm(GA)is used to select one feature set based on the priority value.Modifications are done on standard GA to perform optimization and to fit the proposed model.The Optimized GA is used in the training phase to assign a priority value for each feature set.Also,the priority values are categorized into three categories:high,medium,and low.Besides,the Optimized GA is used in the testing phase to select a feature set based on its priority.The feature set with a high priority will be given a high priority to be selected.At the end of phase 2,an update for feature set priority may occur based on the selected features priority and the calculated F-Measures.The proposed model can learn and modify feature sets priority,which will be reflected in selecting features.For evaluation purposes,two well-known datasets are used in these experiments.The first dataset is UNSW-NB15,the other dataset is the NSL-KDD.Several evaluation criteria are used,such as precision,recall,and F-Measure.The experiments in this research suggest that the proposed model has a powerful and promising mechanism for the intrusion detection system.
基金This work was supported by the Research Grant of SEC E-Institute :Shanghai High Institution Grid and the Science Foundation ofShanghai Municipal Commission of Science and Technology No.00JC14052
文摘Support vector machine (SVM) technique has recently become a research focus in intrusion detection field for its better generalization performance when given less priori knowledge than other soft-computing techniques. But the randomicity of parameter selection in its implement often prevents it achieving expected performance. By utilizing genetic algorithm (GA) to optimize the parameters in data preprocessing and the training model of SVM simultaneously, a hybrid optimization algorithm is proposed in the paper to address this problem. The experimental results demonstrate that it’s an effective method and can improve the performance of SVM-based intrusion detection system further.
文摘针对现有网络入侵检测方法的不足,提出了一种新的网络入侵检测方法——GATS-LSVM算法。该方法采用遗传算法(GA)与禁忌搜索(TS)相混合的搜索策略对特征子集空间进行随机搜索,利用提供的数据在无约束优化线性支持向量机(LSVM)上的分类错误率作为特征子集的评估标准获取最优特征子集,从而有效地对入侵进行检测。大量基于著名的KDD Cup 1999数据集的实验表明,该新方法相对于其它一些传统的网络入侵检测方法,能在保证较高检测率的前提下,有效地降低误报率、入侵检测的计算复杂度和提高检测速度,能更适用于现实高速网络应用环境。
文摘研究入网络安全的入侵检测问题。针对网络入侵数据的高维、非线性和冗余特点,传统降维和检测方法检测率低的难题,为了提高网络安全性,提出一种基于主成分分析的遗传神经网络网络入侵检测方法。首先对网络入侵的数据维数利用主成分分析进行降维处理,消除数据之间的冗余信息,简化神经网络的输入,然后采用遗传算法对神经网络的权值进行优化,加快神经网络的学习速度,最后采用优化的神经网络模型对主成分分析后的数据进行检测,捕捉网络入侵数据的非线性规律。通过网络入侵KDD CUP 99数据集对该算法进行验证性实验,实验结果表明,相对于其它网络入侵检测方法,该方法学习速度快,检测正确率高、漏报率与误报率低,是一种高效、实时好的网络入侵检测方法。
