返回
Efficient intrusion detection using representative instances
DOI:10.1016/j.cose.2013.08.003.png)
摘要
En 中文
Because of their feasibility and effectiveness, artificial intelligence-based intrusion detection systems attract considerable interest from researchers. However, when confronted with large-scale data sets, many artificial intelligence-based intrusion detection systems could suffer from a high computational burden, even though the feature selection method can help to reduce the computational complexity. To improve the efficiency, we propose a representative instance selection method to preprocess the original data set before training a classifier, which is independent of the learning algorithm that is used for constructing the intrusion detection system. In this study, a new metric is introduced to measure the representative power of an instance with respect to its class. Based on an implementation of representativeness, we select the most representative instance in each subset divided by a novel centroid-based partitioning strategy, and then, we utilise the result as training data to build various intrusion detection models efficiently. Experimental results on a labelled flow-based data set introduced in 2009 show that ANN, KNN, SVM and Liblinear learning with a largely reduced set of representative instances can not only achieve high efficiency in detecting network attacks but also provide comparable detection performance in terms of the detection rate, precision, F-score and accuracy, as compared with four corresponding classifiers built with the original large data set. (C) 2013 Elsevier Ltd. All rights reserved.
Keyword:
Intrusion detection
Intelligent algorithm
Feature selection
Data preprocessing
Centroid-based classification
期刊
C
IF:
5.4
论文数:
4.6K
被引数:
1.4W
机构
引用论文
An intrusion detection and alert correlation approach based on revising probabilistic classifiers using expert knowledge
APPLIED INTELLIGENCE
IF3.5
A triangle area based nearest neighbors approach to intrusion detection一种基于三角形区域的最近邻入侵检测方法
PATTERN RECOGNITION
IF7.6
Physiological and behavioral responses to corticotropin-releasing factor administration: is CRF a mediator of anxiety or stress responses?促肾上腺皮质激素释放因子的生理和行为反应: CRF是焦虑或应激反应的中介物吗?

