基于集成学习的入侵检测方法  

Intrusion Detection Method Based on Ensemble Learning

作　　者：李凯[1] 陈武[1] 

机构地区：[1]河北大学数学与计算机学院,保定071002

出　　处：《计算机工程》2008年第11期166-167,176,共3页Computer Engineering

基　　金：河北省教育厅基金资助项目(2006406);河北大学博士基金资助项目(2006075)

摘　　要：入侵检测是近年来网络安全研究的热点。利用多分类器技术,研究了基于集成学习的入侵检测方法。应用Bootstrap技术生成分类器个体,为了提高分类器的差异性,应用聚类技术对分类器进行聚类,在相应的聚类结果中选取不同的分类器个体,并选择不同的融合方法对分类结果进行融合。针对入侵检测数据的实验表明了该集成技术的有效性。Intrusion detection is a highlighted topic of network security research in recent years. Intrusion detection method based on ensemble learning is studied by using multiple classifiers. Some classifiers are created by Bootstrap technique. To improve their diversity, clustering technique is applied to them for choosing diverse individuals in each cluster. Then different fusion techniques are used to combine different classification results. Experiments are conducted with intrusion detection data set and show that intrusion detection based on ensemble learning is effective.

关 键 词：集成学习 融合 入侵检测 泛化性能 

分 类 号：TP391[自动化与计算机技术—计算机应用技术]