计算机工程与应用 ›› 2013, Vol. 49 ›› Issue (11): 88-91.

• 网络、通信、安全 • 上一篇    下一篇

支持向量分类机在入侵检测中的应用研究

雷向宇,周  萍   

  1. 桂林电子科技大学 计算机科学与工程学院,广西 桂林 541004
  • 出版日期:2013-06-01 发布日期:2013-06-14

Research of support vector machine classifiers for intrusion detection

LEI Xiangyu, ZHOU Ping   

  1. School of Computer Science and Engineering, Guilin University of Electronic Technology, Guilin, Guangxi 541004, China
  • Online:2013-06-01 Published:2013-06-14

摘要: 为解决入侵检测系统的泛化能力问题,分析了多类分类器的理论框架,并综合考虑训练集数据的预处理、交叉验证时间和入侵检测模型准确率三个因素,提出了一种改进的粗细网格参数优化算法。在基于支持向量机的入侵检测模型中,将KDD数据集映射到高维空间,并采用不同的算法对核函数相关参数进行优化。实例仿真计算表明,通过改进的网格搜索法所获得的参数相对来说有明显的时间优势,分类精度和效率得到了提高。

关键词: 入侵检测系统, KDD数据集, 支持向量机, 核函数, 网格搜索

Abstract: To enhance the approximation and generalization ability of intrusion detection system, theoretical framework of multiple classifiers is analyzed, and factors such as training data pretreatment, cross-validation time and intrusion detection model accuracy is also taken into consideration. In order to get optimal parameters rapidly, a new approach based on grid search is presented. The KDD dataset is mapped into a high-dimensional feature space via the method for intrusion detection based on support vector machine. Different algorithms are applied to optimize the related parameters for kernel function. By using improved grid search method, the acquired parameter has relatively obvious time superiority. The experimental results prove that the classification accuracy and efficiency are improved.

Key words: intrusion detection system, KDD dataset, support vector machine, kernel function, grid search