首页 | 本学科首页   官方微博 | 高级检索  
     

基于可变网络结构自组织映射的入侵检测模型
引用本文:吴德鹏,柳毅. 基于可变网络结构自组织映射的入侵检测模型[J]. 计算机工程与应用, 2020, 56(12): 81-86. DOI: 10.3778/j.issn.1002-8331.1902-0248
作者姓名:吴德鹏  柳毅
作者单位:广东工业大学 计算机学院,广州 510006
摘    要:针对网络入侵检测在数据不均衡下检测性能较差的问题,提出了一种对比主成分分析(c PCA)结合可改变网络结构的自组织映射(AMSOM)的入侵检测模型。通过把少数类设置为背景数据,c PCA在降维的同时提高模型对少数类攻击的识别能力。AMSOM在输出层构建一个更加灵活的动态神经元网络,保持两个空间的对应关系,解决了SOM在训练过程中产生畸形的问题,提高输出神经元的聚类结果识别率。使用NSL-KDD数据集,实验结果表明提出的模型对少数的网络攻击表现出良好的性能,具有更高的准确率、召回率和F1值。

关 键 词:网络安全  入侵检测  神经网络  自组织映射  NSL-KDD数据集

Intrusion Detection Model Based on Self-Organizing Map of Variable Network Structure
WU Depeng,LIU Yi. Intrusion Detection Model Based on Self-Organizing Map of Variable Network Structure[J]. Computer Engineering and Applications, 2020, 56(12): 81-86. DOI: 10.3778/j.issn.1002-8331.1902-0248
Authors:WU Depeng  LIU Yi
Affiliation:School of Computer, Guangdong University of Technology, Guangzhou 510006, China
Abstract:To solve the problem of poor performance of network intrusion detection under unbalanced data, a new intrusion detection model based on cPCA and AMSOM is proposed. By setting a small number of classes as background data, cPCA can reduce the dimension and improve the classifier’s ability to recognize attacks on a small number of classes. AMSOM constructs a more flexible dynamic neuron network in the output layer and maintains the corresponding relationship between the two spaces, which solves the problem of misshapen in the training process of SOM and improves the recognition rate of the clustering results of output neurons. Using NSL-KDD dataset, the experimental results show that the proposed model has good performance against a few network attacks, with higher accuracy, recall rate and [F1] value.
Keywords:network security  intrusion detection  neural network  self organizing map  NSL-KDD dataset  
本文献已被 维普 万方数据 等数据库收录!
点击此处可从《计算机工程与应用》浏览原始摘要信息
点击此处可从《计算机工程与应用》下载免费的PDF全文
设为首页 | 免责声明 | 关于勤云 | 加入收藏

Copyright©北京勤云科技发展有限公司  京ICP备09084417号