面向入侵检测的基于IMGA和MKSVM的特征选择算法  

Feature Selection Algorithm Based on IMGA and MKSVM to Intrusion Detection

作　　者：井小沛[1] 汪厚祥[1] 聂凯[1] 罗志伟[1] 

机构地区：[1]海军工程大学电子工程学院,武汉430033

出　　处：《计算机科学》2012年第7期96-99,111,共5页Computer Science

基　　金：海军十一五预研项目(4010601010201)资助

摘　　要：入侵检测系统处理的数据具有数据量大、特征维数高等特点,会降低检测算法的处理速度和检测效率。为了提高入侵检测系统的检测速度和准确率,将特征选择应用到入侵检测系统中。首先提出一种基于免疫记忆和遗传算法的高效特征子集生成策略,然后研究基于支持向量机的特征子集评估方法。并针对可能出现的数据集不平衡造成的特征子集评估能力下降,以黎曼几何为依据,利用保角变换对核函数进行修改,以提高支持向量机的分类泛化能力。实验仿真表明,提出的特征选择算法不仅可以提高特征选择的效果,而且在不平衡数据集上具有更好的特征选择能力。还表明,基于该方法构建的入侵检测系统与没有运用特征选择的入侵检测系统相比具有更好的性能。In order to improve performances of intrusion detection system in terms of detection speed and detection rate, it is necessary to apply feature selection in intrusion detection system. Firstly, an efficient search procedure based on immune memory and genetic algorithm （IMGA） was proposed. Then, support vector machine （SVM） based on wrapper feature evaluation methods was surveyed, in order to improve the feature selection performance of unbalanced datasets. We used the conformal transformation and Riemannian metric to modify kernel function, and reconstructed a new Modified Kernel SVM （MKSVM）. Finally, the simulation experimental results show that this approach can im- prove the process of selecting important features, and has better feature selection ability on the unbalanced data. Fur- thermore, the experiments indicate that intrusion detection system with this feature selection algorithm has better per- formances than that without feature selection algorithm.

关 键 词：特征选择 入侵检测 遗传算法 支持向量机 修正核函数 

分 类 号：TP393[自动化与计算机技术—计算机应用技术]