邻域模型在入侵检测中的应用  

Application of Neighborhood Model in Intrusion Detection

作　　者：杨森[1] 曹付元[2] 

机构地区：[1]山西大学商务学院,山西太原030031 [2]山西大学计算机与信息技术学院,山西太原030006

出　　处：《内蒙古师范大学学报（自然科学汉文版）》2015年第4期443-446,共4页Journal of Inner Mongolia Normal University(Natural Science Edition)

基　　金：山西省高等学校科技创新项目(20131111);山西大学商务学院基金项目(2012011;2014010)

摘　　要：根据对象邻域的分离度和耦合度确定初始聚类中心,提出一种基于邻域模型的k-means改进算法,并以KDD CUP 99数据集为对象,对入侵检测进行了仿真实验.结果显示,改进后的算法在入侵检测率和误检率方面均优于IKCM算法和传统的k-means算法.This paper constructively advances the k-means,an improved algorithm based on neighbor-hood model by ascertaining the initial clustering centre according to the degree of separation and coupling in object neighborhood.It further carries the simulation experiment on intrusion detection system with the KDD CUP 99 data sets as the experimental subjects.It strongly supports the conclusion that the improved algorithm is superior to IKCM algorithm and the traditional k-means algorithm either in intrusion detection rate and false detection rate.

关 键 词：邻域模型 入侵检测 检测率 误检率 

分 类 号：TP301.6[自动化与计算机技术—计算机系统结构]