• 中国计算机学会会刊
  • 中国科技核心期刊
  • 中文核心期刊

J4 ›› 2006, Vol. 28 ›› Issue (4): 33-36.

• 论文 • 上一篇    下一篇

基于SVM主动学习算法的网络入侵检测系统

段丹青[1,2] 陈松乔[1] 杨卫平[1,2]   

  • 出版日期:2006-04-01 发布日期:2010-05-20

  • Online:2006-04-01 Published:2010-05-20

摘要:

入侵检测系统已经成为网络安全技术的重要组成部分。然而,传统的异常入侵检测技术需要通过对大量训练样本的学习才能达到较高的检测精度,而大量训练样本集的获取在现实网络环境中是比较困难的。本文研究在网络入侵检测中采用基于支持向量机(SVM)的主动学习算法,解决训练样本获取代价过大带来的问题。通过基于SVM的主动学习算
算法与传统的被动学习算法的对比实验说明,主动学习算法能有效地减少学习样本数及训练时间,能有效地提高入侵检测系统的分类性能。

关键词: 入侵检测 支持向量机 主动学习

Abstract:

The Intrusion Detection System(I D S) has become an important part of network security. However, the traditional abnormal detection is heavily dependent on the large training samples to get high detection precision, but it is difficult to obtain sufficient training data in a real network environment  . In order to solve the problem of excessive expense caused by obtaining the training samples, we use the SVM(Support Vector Machine)active learning a  algorithm in network intrusion detection. Compared with the traditional self-learning algorithm, our experiment shows that the active learning algorithm can immensely reduce the number of training samples and the training time, thus efficiently improving the performance of classification in IDSs.

Key words: intrusion detection, support vector machine, active learning