基于改进属性加权的朴素贝叶斯入侵取证研究  

Research of intrusion forensics based on improved attribute Weighted Naive Bayes

作　　者：贾娴[1,2] 刘培玉[1,2] 公伟[1,2] 

机构地区：[1]山东师范大学信息科学与工程学院,济南250014 [2]山东省分布式计算机软件新技术重点实验室,济南250014

出　　处：《计算机工程与应用》2013年第7期81-84,共4页Computer Engineering and Applications

基　　金：国家自然科学基金(No.60873247);山东省自然科学基金(No.ZR2009GZ007);山东省高新技术自主创新工程(No.2008ZZ28);山东省教育厅科技计划项目(No.J09LG52)

摘　　要：针对传统朴素贝叶斯分类模型在入侵取证中存在的特征项冗余问题,以及没有考虑入侵行为所涉及的数据属性间的差别问题,提出一种基于改进的属性加权朴素贝叶斯分类方法。用一种改进的基于特征冗余度的信息增益算法对特征项集进行优化,并在此优化结果的基础上,提取出其中的特征冗余度判别函数作为权值引入贝叶斯分类算法中,对不同的条件属性赋予不同的权值。经实验验证,该算法能有效地选择特征向量,降低分类干扰,提高检测精度。Traditional Naive Bayes classification exists the issues of feature redundancy in intrusion forensics and neglects the difference between data attributes in different intrusion actions. For these issues, an improved Weighted Naive Bayes classification method by setting attribute weights is proposed. A new Information Gain algorithm based on feature redundancy is used to opti- mize the set of feature, then the discriminant of feature redundancy extracted as weights is introduced to Bayes classification algorithm based on this optimization results. The different condition attributes are weighted differently. The experimental results show that the new algorithm can effectively select features, reduce classification interference and improve detection accuracy.

关 键 词：入侵取证 朴素贝叶斯 加权朴素贝叶斯 信息增益 特征冗余度 属性加权 

分 类 号：TP393[自动化与计算机技术—计算机应用技术]