基于邻域粗糙集的网络入侵分类诊断组合模型研究  

Acombined Model Study of Taxonomic Diagnosis of Network Intrusion Based on Neighborhood Rough Set

作　　者：熊文真[1] 刘静瑞[1] 李红娟[2] XIONG Wen-zhen LIU Jing-rui LI Hong-juan(Xinyang Vocational ＆ TechnicalE College, The School of Mathematics and Computer Science, Xinyang 464000, China Kunming University of Science and Technology, Quality Development Institute, Kunming 650093, China)

机构地区：[1]信阳职业技术学院数学与计算机科学学院,河南信阳464000 [2]昆明理工大学质量发展研究院,云南昆明650000

出　　处：《数学的实践与认识》2017年第10期145-151,共7页Mathematics in Practice and Theory

基　　金：国家自然科学基金(51066002/E060701);NSFC-云南联合基金资助项目(U0937604)

摘　　要：网络入侵诊断直接影响网络正常运行和安全.针对入侵类型复杂,现有分类诊断模型精度有限的问题,提出一种基于邻域粗糙集的网络入侵分类诊断优化模型.首先,运用邻域粗糙集对网络入侵数据进行条件属性的约简,确定关键属性,然后将其作为训练输入构建相关向量机分类诊断模型,并同时运用遗传算法进行超参数优化,提高模型诊断精度和速度.通过KDDCup99数据集对优化模型性能进行检验,结果表明,组合预测方法精确度高于支持向量机、相关向量机和BP神经网络.组合模型诊断精度高、速度快,具有优异的综合性能.Network intrusion diagnosis has a direct impact on the routine operation and security of network. To deal with the problems of complicated intrusion categories and lim- ited accuracy of taxonomic diagnosis of existing models, we propose an optimized taxonomic diagnosis model of network intrusionbased on neighborhood rough set （NRS）. First, we use NRS to make a conditional attribute reduction of network intrusion data and determine the key attributes. Then, it acts as the training inputs to build the taxonomic diagnosis model with relevance vector machine （RVM）. Meanwhile, genetic algorithm is adopted to make a hyperparameter optimization and enhance the accuracy and speed of model diagnosis. Performance test of the optimized model is carried out with KDDCup99 data sets. Results have revealed that, the combined prediction method enjoys higher accuracy than support vector machine （SVM）, RVM and BP neural network. The combined model has a higher accuracy and fast speed, which enjoys excellent comprehensive performance.

关 键 词：网络入侵 领域粗糙集 相关向量机 遗传算法 分类诊断 

分 类 号：TP18[自动化与计算机技术—控制理论与控制工程] TP393.08[自动化与计算机技术—控制科学与工程]