• 中国计算机学会会刊
  • 中国科技核心期刊
  • 中文核心期刊

J4 ›› 2010, Vol. 32 ›› Issue (6): 34-36.doi: 10.3969/j.issn.1007130X.2010.

• 论文 • 上一篇    下一篇

基于BP网络与改进的PSO算法的入侵检测研究

沈学利,张纪锁   

  1. (辽宁工程技术大学电子与信息工程学院,辽宁 葫芦岛 125105)
  • 收稿日期:2009-05-19 修回日期:2009-09-14 出版日期:2010-06-01 发布日期:2010-06-01
  • 通讯作者: 张纪锁 E-mail:zhjsuo@126.com
  • 作者简介:沈学利(1969),男,江苏连云港人,副教授,研究方向为计算机网络安全和虚拟现实等;张纪锁,硕士生,研究方向为计算机网络安全。

Reserch of Intrusion Detection Based on the BP Networks and the Improved PSO Algorithm

SHEN Xueli,ZHANG Jisuo   

  1. (School of Electronics and Information Engineering,Liaoning Technical University,Huludao 125105,China)
  • Received:2009-05-19 Revised:2009-09-14 Online:2010-06-01 Published:2010-06-01

摘要:

本文针对入侵检测系统中的误检率,提出了一种将BP网络和改进的PSO算法相结合的方法。该方法基于BP网络算法的局部精确搜索和改进的PSO算法的全局搜索的特性,并且用改进的PSO算法优化BP网络的权值、阈值,克服BP网络算法易陷入局部极值的弊端。在入侵检测系统中应用该网络结构,能准确地发现已知的攻击行为,并能进一步预测新的攻击行为,减少了入侵事件的漏报和误报。通过KDD99 CUP 数据集进行仿真实验,与基于PSOBP算法、传统的BP算法的入侵检测系统相比较,表明改进的PSOBP算法的迭代次数较少、收敛速度快、检测率高,有一定的有效性。

关键词: 改进的PSO, BP网络, 入侵检测

Abstract:

This paper shows a way that combines the BP networks with the improved PSO algorithm aiming at false positive rate in intrusion detection systems(IDS).Based on the characteristics of the local precise search of the BP networks and the global search of the improved PSO algorithm, this method optimizes the weight and threshold of the BP networks, conquers the disadvantages of the BP networks that are easily trapped in the local extremum. And the network structure is applied into intrusion detection systems, which can discover the known detection exactly, forecast the new detection ,and reduce the invasion of omissions and the false alarm rate. Comparing the simulation results of the KDD99 CUP dataset with the intrusion detection system based on the traditional BP networks and the improved PSOBP network algorithm, the improved PSO algorithm shows less iteration times, quicker convergence rate,higher detection rate ,and sufficient availability.

Key words: improved PSO algorithm;BP networks;intrusion detection

中图分类号: