SVM Ensemble Intrusion Detection Model Based on Rough Set Feature Reduct
To address the problem of low accuracy and high false alarm rate in network intrusion detection system, an Intrusion detection model of SVM ensemble using rough set feature reduct is presented. Utilizing the character that Rough set algorithm can keep the discernability of original dataset after reduction, the reducts of the original dataset are calculated and used to train individual SVM classifier for ensemble, which increase the diversity between individual classifiers, and consequently, increase the probability of detection accuracy improving. To validate the effectiveness of the proposed method, simulation experiments are performed based on the KDD 99 dataset. During the process of the experiments, two arguments, the sample number and the base classification number, are discussed to test their effect on the final result. And then detection performance comparison among the SVMusing all samples, SVM-Bagging ensemble and Rough Set based SVM-Bagging are performed. The results show that the Rough Set based SVM-Bagging is a promised ensemble method owning to its high diversity, high detection accuracy and faster speed in intrusion detection.
Rough set Feature reduct Support vector machine Ensemble learning Intrusion detection
Zhang Hongmei
Information and communication College, Guilin University of Electronic Technology, Guilin 541004
国际会议
2009年中国控制与决策会议(2009 Chinese Control and Decision Conference)
广西桂林
英文
5604-5608
2009-06-17（万方平台首次上网日期，不代表论文的发表时间）