基于相关向量机的网络入侵检测算法

针对支持向量机理论中存在的问题：训练样本数量多以及必须满足MerCer条件等，提出了一种基于相关向量机（RVM）的网络入侵检测方法。首先采用“删除特征”法对KDD99数据集中的41个特征进行评级，筛选出针对不同入侵类型的重要特征和非重要特征，然后只选择重要特征进行匹配。结果表明，这种方法与基于支持向量机（SVM）的入侵检测模型相比，具有更高的检测率和更低的误警率。

Intrusion Detection Method Based on Relevance Vector Machine

For some problems in support vector machine theory, such as the large amount of training samples and the necessity to satisfy the Mercer conditions, etc. a new method based on relevant vector machine algorithm for network intrusion detection is proposed. First, the ＂feature deduction＂ method is applied to rating the 41 features in the KDD 99 dataset, and the important features and unimportant features are selected according to different attack types, and only the important features could, in IDS, effectively increase the detection rate and reduce the false alarm rate and the detecting time. Comparison with the SVM-based model indicates that the proposed RVM-based model is of higher detection probability and much lower false alarm rate.