作者投稿和查稿 主编审稿 专家审稿 编委审稿 远程编辑

计算机工程 ›› 2010, Vol. 36 ›› Issue (1): 166-169. doi: 10.3969/j.issn.1000-3428.2010.01.058

• 安全技术 • 上一篇    下一篇

基于人工免疫聚类的异常检测算法

黄学宇1,魏 娜2,陶建锋1   

  1. (1. 空军工程大学导弹学院,三原 713800;2. 空军工程大学训练部教育技术中心,西安 710051)
  • 收稿日期:1900-01-01 修回日期:1900-01-01 出版日期:2010-01-05 发布日期:2010-01-05

Abnormal Detection Algorithm Based on Artificial Immune Clustering

HUANG Xue-yu1, WEI Na2, TAO Jian-feng1   

  1. (1. Missile Institute, Air Force Engineering University, Sanyuan 713800; 2. Education Technology Center, Training Dept., Air Force Engineering University, Xi’an 710051)
  • Received:1900-01-01 Revised:1900-01-01 Online:2010-01-05 Published:2010-01-05

摘要: 提出一种基于人工免疫聚类的异常检测算法,采用基于距离的异常度量因子,可以方便地筛选数据集中最突出的异常数据,能够依据不同的安全策略调节异常容忍因子,从而平衡检测率和漏报率之间的矛盾。实验结果表明,该算法采用无标记的训练数据集,能自动适应不同的网络及应用环境。

关键词: 入侵检测, 异常检测, 人工免疫聚类

Abstract: A novel abnormal detection algorithm based on artificial immune clustering is presented. The outlier measure of selection abnormal item from dataset based on distance is employed in this algorithm, which makes it easy to get better tradeoff between detection rate and false positive rate according to security policies chosen by user. Experimental results show that because this algorithm can label the abnormal activities without training dataset, it can be applied in different network system and application environments.

Key words: intrusion detection, abnormal detection, artificial immune clustering

中图分类号: