作者投稿和查稿 主编审稿 专家审稿 编委审稿 远程编辑

计算机工程 ›› 2012, Vol. 38 ›› Issue (7): 99-101. doi: 10.3969/j.issn.1000-3428.2012.07.032

• 安全技术 • 上一篇    下一篇

一种基于HGA和数据挖掘的AMG模型

魏德志,洪联系,林丽娜,王奇光   

  1. (集美大学诚毅学院,福建 厦门 361021)
  • 收稿日期:2011-05-05 出版日期:2012-04-05 发布日期:2012-04-05
  • 作者简介:魏德志(1982-),男,讲师、硕士,主研方向:数据挖掘,网络安全,智能算法;洪联系,副教授、博士;林丽娜,助教、 硕士;王奇光,教授
  • 基金资助:
    福建省仿脑智能系统重点实验室开放课题基金资助项目(BLISSOS2010103)

AMG Model Based on HGA and Data Mining

WEI De-zhi, HONG Lian-xi, LIN Li-na, WANG Qi-guang   

  1. (Chengyi College, Jimei University, Xiamen 361021, China)
  • Received:2011-05-05 Online:2012-04-05 Published:2012-04-05

摘要: 提出一种基于数据挖掘和混合遗传算法(HGA)的自适应模型生成(AMG)模型。采用改进的聚类算法,从网络和系统的行为记录中划分出正常/异常行为库,利用HGA从行为库中挖掘出入侵规则加入规则库中,通过混合检测模块进行检测。实验结果证明,该AMG模型能以更高的检测率、更低的误检率检测未知的网络入侵。

关键词: 数据挖掘, 入侵检测, 混合遗传算法, 自适应模型生成, 聚类算法, 信息增益

Abstract: The paper proposes an Adaptive Model Generation(AMG) model based on Hybrid Genetic Algorithm(HGA) and data mining. An improved clustering algorithm is used to divide the normal/abnormal behavior library that is from network and system behavior records. HGA is used to dig out the invasion rules, the rules are put into the rule base, and detection is realized by hybrid detection module. Experimental results show that the AMG model can detect unknown intrusion with higher detection rate and lower false detection rate.

Key words: data mining, intrusion detection, Hybrid Genetic Algorithm(HGA), Adaptive Model Generation(AMG), clustering algorithm, information gain

中图分类号: