吉林大学学报(理学版)

• 计算机科学 • 上一篇    下一篇

一种基于特征选择的入侵检测方法

崔亚芬1, 解男男2   

  1. 1. 吉林省招生委员会办公室, 长春 130033; 2. 吉林大学 计算机科学与技术学院, 长春 130012
  • 收稿日期:2014-11-17 出版日期:2015-01-26 发布日期:2015-01-19
  • 通讯作者: 解男男 E-mail:xienn1113@163.com

An Intrusion Detection Method Based on Feature Selection

CUI Yafen1, XIE Nannan2   

  1. 1. Jilin Admission and Examinations Committee Office, Changchun 130033, China;2. College of Computer Science and Technology, Jilin University, Changchun 130012, China
  • Received:2014-11-17 Online:2015-01-26 Published:2015-01-19
  • Contact: XIE Nannan E-mail:xienn1113@163.com

摘要:

针对入侵检测中网络数据高维度、 大规模所带来的问题, 基于特征选择方法Fisher在网络安全数据集中的应用, 提出一种基于特征选择的通用入侵检测框架. 该方法通过提取关键特征, 降低安全数据的维度; 采用K近邻方法作为分类器, 验证特征选择后的检测效果. 实验结果表明, 该方法能在较少特征的情况下达到较高的检测率, 具有较好的可行性.

关键词: 入侵检测, Fisher特征选择, K近邻算法

Abstract:

This paper concerns about the problems about processing large\|scale and high dimension network datasets in intrusion detection. The typical feature selection algorithm Fisher was used in network security datasets, in order to reduce the dimension of features. Knearest neighbor algorithm was
used as the classify algorithm, to evaluate the detection rate. A general intrusion detection framework based on feature selection was presented and realized. Experiments  show it has a satisfying  detection accuracy with less features and a good feasibility.

Key words: intrusion detection, Fisher feature selection, Knearest neighbor algorithm

中图分类号: 

  • TP309.2