作者投稿和查稿 主编审稿 专家审稿 编委审稿 远程编辑

计算机工程 ›› 2020, Vol. 46 ›› Issue (6): 303-307. doi: 10.19678/j.issn.1000-3428.0055114

• 开发研究与工程应用 • 上一篇    下一篇

基于检测器集层次聚类的否定选择算法

王韫烨, 孔珊   

  1. 郑州师范学院 信息科学与技术学院, 郑州 450044
  • 收稿日期:2019-06-04 修回日期:2019-07-25 发布日期:2019-08-14
  • 作者简介:王韫烨(1980-),女,讲师、硕士,主研方向为网络安全、数据异常检测;孔珊,硕士。
  • 基金资助:
    国家自然科学基金(61572447);河南省科技攻关计划项目(162102310238)。

Negative Selection Algorithm Based on Hierarchical Clustering of Detector Set

WANG Yunye, KONG Shan   

  1. College of Information Science and Technology, Zhengzhou Normal University, Zhengzhou 450044, China
  • Received:2019-06-04 Revised:2019-07-25 Published:2019-08-14

摘要: 传统的否定选择过程需要将全部检测器与测试数据进行匹配以排除异常数据,该匹配过程需要花费大量时间,导致检测效率过低。为此,提出一种基于检测器集层次聚类的否定选择算法。对生成的检测器进行层次聚类,减少需要计算距离的检测器数量,不再将与检测器不匹配的数据标记为正常数据,而是基于该数据与自体集和检测器集距离的计算结果将其标记为正常数据或异常数据。实验结果表明,与V-detector算法和免疫实值否定选择算法相比,该算法的检测效率显著提高,误检率明显降低。

关键词: 异常检测, 检测器集, 否定选择算法, 层次聚类, 检测效率

Abstract: The traditional negative selection process takes a long time to match all detectors with test data to eliminate abnormal data,resulting in low detection efficiency.Therefore,this paper proposes a negative selection algorithm based on hierarchical clustering of the detector set.The number of detectors that need to calculate the distance is reduced by hierarchical clustering of the generated detectors.The data that does not match the detector is no longer directly marked as normal data,but is marked based on the calculation results of the distance between the data and the self-set and the detector set.Experimental results show that compared with the V-detector algorithm and the real-valued negative selection algorithm of immunity,the proposed algorithm significantly improves the detection efficiency and reduces the false detection rate.

Key words: anomaly detection, detector set, negative selection algorithm, hierarchical clustering, detection efficiency

中图分类号: