关键词: 入侵检测, 异常检测, 主成分分析

Abstract: An anomaly detection method based on principal component analysis is proposed. The method partitions the train data set into several sub-sets to get the distribution of the normal pattern in feature space. Then it extracts the feature contour of each sub-set. Finally it detects behavior records by the PCA matrix of each sub-set. The results of the experiment show that the anomaly detection method based on principal component analysis is effective.

Key words: Intrusion detection, Anomaly detection, Principal Component Analysis