A Network Intrusion Detection Algorithm Based on Relative Distance Competitive Activation

J4 ›› 2011, Vol. 33 ›› Issue (9): 13-18.

• 论文 • Previous Articles Next Articles

A Network Intrusion Detection Algorithm Based on Relative Distance Competitive Activation

LIANG Bizhen,LU Yueran,YANG Xuguang

(Department of Mathematics and Computer Information Engineering,Baise University,Baise 533000,China)

Received:2011-05-20 Revised:2011-07-26 Online:2011-09-25 Published:2011-09-25

Abstract

Abstract:

Aiming at the problem of lower efficiency of network intrusion detection learning algorithms at present, a concept called relative distance is proposed in this paper, and then competitive activation and similarity measurement are constructed based on it. On that basis we put forward an improved network intrusion detection algorithm. The advantage of the improved algorithm is: (1) The relative distance can distinguish the terms of column with a large range very well and realize normalization in a lower complexity; (2) Competitive activation of relative distance can process the data which includes the characteristics in a lower computation complexity without converting characters into integers; (3)The algorithm needs no reset. Examination results on the KDD Cup99 sets show that the improved algorithm can reduce the learning time and the testing time significantly while maintaining the accuracy of detection compared to other approaches.

Key words: intrusion detection；competitive activation；relive distance；similarity measurement

LIANG Bizhen,LU Yueran,YANG Xuguang. A Network Intrusion Detection Algorithm Based on Relative Distance Competitive Activation[J]. J4, 2011, 33(9): 13-18.

References

［1］Hansen L K, Salamon P. Neural Network Ensembles［J］. IEEE Transactions on Pattern Analysis and Machine Intelligence, 1990, 12(10):9931001.
［2］Cooper L N. Hybrid Neural Network Architectures: Equilibrium Systems that Pay Attention［M］∥Mammone R J, Zeevi Y Y eds. Neural Networks：Theory and Applications. San Diego, CA: Academic Press, 1991:8196.
［3］Auda G, Kamel M. CMNN: Cooperative Moduar Neural Networks［C］∥Proc of Int’l Conf on Neural Networks, 1997:226231.
［4］Grossberg S. Adaptive Pattern Classification and Universal Recoding:1.Paraller Development and Coding of Neural Detectors［J］. Biological Cybernetics, 1976(23):121134.
［5］马锐,刘玉树,杜彦辉.基于ART2神经网络的入侵检测方法［J］.北京理工大学学报,2004,24(8):701704.
［6］Carpenter G A, Grossberg S. ART2:SelfOrganization of Stable Category Recognition Codes for Analog Input Pattern［J］. Applied Optics, 1987, 26(23):49194930.
［7］Wu Di，Dai Ji，Chi Zhongxian. Intrusion Detection Based on An Improved ART2 Neural Network［C］∥Proc of the Sixth Int’l Conf on Parallel and Distributed Computing, Applications and Technologies,2005:234238.
［8］付兴兵.基于无监督神经网络的入侵检测技术研究［D］.西南大学学报，2007.
［9］田大新，刘衍珩，魏达. ARTNIDS：基于自适应谐振理论的网络入侵检测系统［J］. 计算机学报，2005,28(11):18821889.
［10］刘衍珩,田大新,余雪岗,等.基于分布式学习的大规模网络入侵检测算法［J］.软件学报,2008,19(4):9931003.
［11］http://kdd.ics.uci.edu/databases/kddcup99/kddcup99.html.
［12］Carpenter G A, Grossberg S. A Massively Parallel Architecture for a Self Organizing Neural Pattern Recognition Machine［J］ . Comp Vision Graphics and Image Process, 1987, 37(1):54115.
［13］Carpenter G A, Grossberg S. ART3: Hierarchical Search Using Chemical Transmitters in Self Organizing Pattern Recognition Architectures［J］ . Neural Networks, 1990, 3(2):129152.
［14］孙亮，禹晶. 模式识别原理［M］.北京：北京工业大学出版社,2009.
［15］Folino G, Pizzuti C, Spezzano G.GP Ensemble for Distributed Intrusion Detection Systems［C］∥Proc of the 3rd Int’l Conf on Advanced in Pattern Recognition, 2005:5462.
［16］Ke W, Salvatore J S. Anomalous Payload Based Network Intrusion Detection［C］∥Proc of the 7th Int’l Symp on Recent Advanced in Intrusion Detection, 2004:201222.
［17］韩小云, 刘瑞岩. ART2网络学习算法的改进［J］. 数据采集与处理，1996, 11(4):241245.
梁碧珍(1965),女,广西玉林人，硕士，副教授，研究方向为数据挖掘、计算机安全。

A Network Intrusion Detection Algorithm Based on Relative Distance Competitive Activation

PDF

Knowledge

Abstract

Cite this article

share this article

References

Related Articles 0

Recommended Articles

Metrics

Comments