基于自适应免疫分类器的入侵检测  

Intrusion Detection Based on Adaptive Immune Classifier

作　　者：钟将[1] 冯永[1] 李志国[1] 叶春晓[1] 

机构地区：[1]重庆大学计算机学院,重庆400030

出　　处：《重庆大学学报（自然科学版）》2007年第7期104-108,共5页Journal of Chongqing University

基　　金：浦东新区科技发展基金资助(PKK2005-07);重庆大学研究生院创新基金资助(200506Y1A0230130);教育部博士点基金资助(20040611002)

摘　　要：由于采用传统的分类器进行检测时,存在检测率低而误报率高的问题。提出了一种基于免疫聚类的自适应分类器方法,采用多信息粒度的思想有效地克服了聚类算法与分类算法间的不一致性。通过在真实网络数据集上对多种入侵行为的检测结果表明:该分类器的检测率高、漏报率和误报率低,较RBF分类器和BP分类器具有更好的分类性能和推广性能。The distribution properties of the normally data and anomaly data in the network connectivity features have huge differences ; therefore, there exist the low rate of detection and false positive rate problem for the traditional classifier which is applied to the network intrusion detection. An adaptive classifier based on the artificial immune cluster is presented. The new classifier adopts multi -granularities idea and it effectively eliminates the inconsistency between the classification algorithm and the clustering algorithm. Through the classification of the data sets in real variety of network intrusion data sets, experimental results show that the classifier has high detection rate and low false positive rate; it has better classification performance and generalization ability than RBF and BP classifiers.

关 键 词：分类器 入侵检测 免疫聚类 多信息粒度 

分 类 号：TP391[自动化与计算机技术—计算机应用技术]