Computer Engineering and Applications ›› 2013, Vol. 49 ›› Issue (17): 89-93.

Previous Articles     Next Articles

Anomaly classification based on fusion of NBC and PNN

ZHOU Mingwei, LIU Yuan   

  1. School of Digital Media, Jiangnan University, Wuxi, Jiangsu 214122, China
  • Online:2013-09-01 Published:2013-09-13

融合NBC与PNN的网络异常分类

周明伟,刘  渊   

  1. 江南大学 数字媒体学院,江苏 无锡 214122

Abstract: Classifying the network anomalies will help the administrators manage the network better. However, the single classifier has the problem that the results of the classification of the various of anomalies are not balanced, not comprehensive and other issues. In consideration of these facts, based on the research of the PNN algorithm and the NBC algorithm which are the most frequently used in classification filed, it proposes a new model using the fusion of the two algorithms. This model uses the accuracy of PNN and NBC that to classify the anomalies as weights, by calculating to obtain the?probability that belongs to each category of?the unknown flow, and the biggest probability will be choosed as the result. According to the verification of the KDD99 data set, experimental results show that the proposed model has the better classification rate and better balance than the simple classifier which through the PNN or NBC algorithm.

Key words: network anomaly, Probability Neural Network(PNN), Naive Bayes Classifier(NBC), fusion, anomaly classification

摘要: 对网络异常进行分类有利于管理员更好地管理网络,然而单一的分类器存在对各类异常的分类效果不均衡,不够全面等问题。鉴于此在研究了常用于分类的概率神经网络(Probability Neural Network,PNN)算法和朴素贝叶斯分类器(Naive Bayes Classifier,NBC)算法的基础上提出了一种融合NBC与PNN的网络异常分类模型。该模型将PNN与NBC对各类网络异常的分类精度作为权值,通过计算得出未知流量所属各类别的概率,最大值为预测结果,通过KDD99数据集对该模型进行测试,实验结果表明,提出的新模型相对于仅使用PNN或者NBC的单分类器,其对各类异常的分类效果具有更好的均衡性和更高的分类精度。

关键词: 网络异常, 概率神经网络, 朴素贝叶斯分类器, 融合, 异常分类