基于随机子空间法的多Agent分布式入侵检测  

Multi-agent Distributed Intrusion Detection Based on Random Subspace Method

作　　者：谷雨[1] 范菁[1] 张天军[1] 

机构地区：[1]云南民族大学网络信息中心

出　　处：《计算机工程》2007年第14期121-122,150,共3页Computer Engineering

基　　金：云南省自然科学基金资助项目(2005F0028Q);云南省教育厅基金资助项目(5Y0588D);云南民族大学重点课程建设项目

摘　　要：提出了一种基于随机子空间的多Agent分布式入侵检测方法。该方法把支持向量机作为检测Agent的核心检测算法,通过引入随机子空间生成具有知识互补特性的多个Agent,将其分布于网络的各个检测节点,用集成的思想把各Agent的结论进行合成。采用这种多Agent的分布式检测可以有效地提高系统的鲁棒性。实验表明这种方法的检测精度高于单个SVM和Bagging方法。A multi-agent distributed intrusion detection method based on random subspace method is put forward. Support vector machine method is the key detection algorithm of intrusion detection agent. The knowledge complementarity of multiple agents is created by the introduction of random subspace method, then these agents are distributed to detection nodes in the network. Subsequently the conclusions of each agent are composed by the ensemble idea. The robustness of the system is effectively improved by distributed intrusion detection based on multi agent. The experiment results show that detection precision of this method is higher than that of single SVM and Bagging.

关 键 词：入侵检测 多AGENT 支持向量机 随机子空间 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]