IDNN：Intrusion detection algorithm based on nearest neighbor strategy

doi:10.3778/j.issn.1002-8331.2010.26.023

Computer Engineering and Applications ›› 2010, Vol. 46 ›› Issue (26): 72-75.DOI: 10.3778/j.issn.1002-8331.2010.26.023

• 网络、通信、安全 • Previous Articles Next Articles

IDNN：Intrusion detection algorithm based on nearest neighbor strategy

ZHANG Yan¹，TAO Jun²

1.School of Computer Science and Technology，China University of Mining and Technology，Xuzhou，Jiangsu 221116，China
2.School of Computer Science and Engineering，Southeast University，Nanjing 210096，China

Received:2010-05-20 Revised:2010-07-06 Online:2010-09-11 Published:2010-09-11
Contact: ZHANG Yan

基于最近邻策略的入侵检测方法研究

张艳¹，陶军²

1.中国矿业大学计算机科学与技术学院，江苏徐州 221116
2.东南大学计算机科学与工程学院，南京 210096

通讯作者: 张艳

Abstract

Abstract: In the field of network intrusion detection，there are some problems such as high false alarm rate，requirement of high quality data for modeling the normal patterns and the deterioration of detection rate for network anomaly detection.This paper presents an intrusion detection algorithm based on nearest neighbor strategy in user transport behavior（IDNN），from the user’s transmission behavior，it researches the IP address，port number，datagram type for user’s datagram，and analyzes the demand for anomaly detection，the specific characteristics of audit data.The experiment demonstrates that the effect of IDNN algorithm is obvious for different users’ applications services behavior in the intrusion detection.

Key words: network security, anomaly detection, user’s transmission behavior, Intrusion Detection algorithm based on Nearest Neighbor method（IDNN）

摘要： 针对目前网络入侵检测系统中，大多数网络异常检测技术仍存在误报率较高、对建立检测模型的数据要求过高、检测率不高等问题。从用户的传输行为出发，研究体现用户行为的数据报文中的IP地址、端口号、报文类型、报文长度，对异常检测的需求、审计数据的具体特征进行分析，提出了一种基于最近邻策略的用户传输行为入侵检测算法-IDNN算法。通过仿真实验，表明IDNN算法在针对不同用户应用服务行为的入侵检测中效果明显。

关键词: 网络安全, 异常检测, 用户传输行为, IDNN算法

CLC Number:

TP393

ZHANG Yan¹，TAO Jun². IDNN：Intrusion detection algorithm based on nearest neighbor strategy[J]. Computer Engineering and Applications, 2010, 46(26): 72-75.

张艳¹，陶军². 基于最近邻策略的入侵检测方法研究[J]. 计算机工程与应用, 2010, 46(26): 72-75.

[1]	ZHANG Bowen, LIU Zhi, SANG Guoming. Anomaly Detection Algorithm Based on Kernel Density Fluctuation [J]. Computer Engineering and Applications, 2021, 57(12): 132-136.
[2]	WU Chutian, CHEN Yongle, CHEN Junjie. Cross-Protocol Anomaly Detection Algorithm Based on HMM [J]. Computer Engineering and Applications, 2020, 56(8): 81-86.
[3]	LI Jiayue, ZHAO Bo, LI Xiang, LIU Hui, LIU Yifan, ZOU Jianwen. Network Traffic Anomaly Prediction Method Based on Deep Learning [J]. Computer Engineering and Applications, 2020, 56(6): 39-50.
[4]	HE Huanye, LIN Guoyuan, GU Hao, FANG Menghua. Improved LOF Algorithm in Cloud Virtual Machine Anomaly Detection Scenario [J]. Computer Engineering and Applications, 2020, 56(23): 80-86.
[5]	ZHAN Peng, CHEN Lin, CAO Luhui, XU Haoran, LI Xueqing. Time Series Anomaly Detection Based on Kernel Turning Points Clipped Representation [J]. Computer Engineering and Applications, 2020, 56(23): 130-138.
[6]	PENG Chunyan, DU Xiujuan. Secure Routing Protocol Based on Depth in Underwater Acoustic Sensor Networks [J]. Computer Engineering and Applications, 2020, 56(2): 76-81.
[7]	GOU Jijun, LI Junhua, CHEN Chen, CHEN Yiming, LV Yida. Network Intrusion Detection Method Based on Random Forest [J]. Computer Engineering and Applications, 2020, 56(2): 82-88.
[8]	LIU Wenfen, MU Xiaodong, HUANG Yuehua. Anomaly Detection Method Based on Multi-resolution Grid [J]. Computer Engineering and Applications, 2020, 56(17): 78-85.
[9]	ZHANG Changhua, ZHOU Xiongtu, ZHANG Yong’ai, YAO Jianmin, GUO Tailiang, YAN Qun. Application Research of Deep Auto Encoder in Data Anomaly Detection [J]. Computer Engineering and Applications, 2020, 56(17): 93-99.
[10]	ZHOU Long, WANG Chen, SHI Yin. Research of Webshell Detection Based on RNN [J]. Computer Engineering and Applications, 2020, 56(14): 88-92.
[11]	WU Depeng, LIU Yi. Intrusion Detection Model Based on Self-Organizing Map of Variable Network Structure [J]. Computer Engineering and Applications, 2020, 56(12): 81-86.
[12]	XIONG Yi, LIANG Yiwen, TAN Chengyu, ZHOU Wen. Anomaly Detection Method of Earthquake Precursor Observation Data Based on Negative Selection Algorithm [J]. Computer Engineering and Applications, 2020, 56(10): 226-230.
[13]	CUI Fangyi1, JING Xiaoyuan2, DONG Xiwei2，3, WU Fei2, SUN Ying2. Fuzzy Clustering Based on Adaptive Bat Algorithm Optimization and Its Application [J]. Computer Engineering and Applications, 2019, 55(7): 16-22.
[14]	YANG Feiyue, TAO Yang. Node Anomaly Detection Algorithm Based on Spatial-Temporal Cooperation in WSNs [J]. Computer Engineering and Applications, 2019, 55(7): 127-131.
[15]	WANG Kai, CHEN Danwei. Research on Algorithm of Dynamic Graph Anomaly Detection Based on LSTM [J]. Computer Engineering and Applications, 2019, 55(5): 76-82.

IDNN：Intrusion detection algorithm based on nearest neighbor strategy

基于最近邻策略的入侵检测方法研究

PDF

Knowledge

Abstract

Cite this article

share this article

References

Related Articles 15

Recommended Articles

Metrics