基于Hash函数改进遗传算法的IPv6下模糊异常检测模型  

A Fuzzy Anomaly Detection Model Based on Genetic Algorithm with Hash Function for IPv6

作　　者：黎耀[1] 李之棠[1] 王莉[1] 

机构地区：[1]华中科技大学网络与计算中心,湖北武汉430074

出　　处：《武汉大学学报（理学版）》2006年第5期600-603,共4页Journal of Wuhan University:Natural Science Edition

基　　金：国家自然科学基金(60573120);湖北省自然科学基金(2005ABA256)资助项目

摘　　要：为了实现基于IPv6的异常检测,设计了一种新的高效异常检测模型.针对传统遗传算法编码效率低下的不足进行了改进.该模型使用基于遗传算法的IPv6模糊异常检测规则生成技术,采用Hash函数进行初始种群优化、随机实数编码进行种群编码,提高了检测准确性.使用实时网络数据流对原型系统和Snort进行对比测试,结果表明所提出的模型在检测效率上有明显改善.In order to accomplish the anomaly detection based on IPv6, we developed a novel anomaly detection model using a fuzzy anomaly detection rules generation technology for IPv6 with genetic algorithm. In the model, we optimize the initial population using Hash algorithm, encode the population using random real values, and detect the anomaly using fuzzy detection rules. Finally, using the CERNET2 backbone traffic, this paper analyzes the performance of t snort. This study shows that the anomaly detection model he model and compares with the performance of provided in this paper has two advantages： algorithm performance and detection effect.

关 键 词：遗传算法 HASH函数 模糊检测 

分 类 号：TP393.8[自动化与计算机技术—计算机应用技术]