Author Login Editor-in-Chief Peer Review Editor Work Office Work

Computer Engineering ›› 2011, Vol. 37 ›› Issue (23): 119-120,128. doi: 10.3969/j.issn.1000-3428.2011.23.040

• Networks and Communications • Previous Articles     Next Articles

Cooperative Intrusion Detection Based on K-SVD

CUI Zhen 1,2   

  1. (1. College of Computer Science & Technology, Huaqiao University, Xiamen 361021, China; 2. Institute of Computing Technology, Chinese Academy of Sciences, Beijing 100190, China)
  • Received:2011-09-01 Online:2011-12-05 Published:2011-12-05

基于K-SVD的协同入侵检测

崔 振1,2   

  1. (1. 华侨大学计算机科学与技术学院,福建 厦门 361021;2. 中国科学院计算技术研究所,北京 100190)
  • 作者简介:崔 振(1981-),男,讲师、博士研究生,主研方向:模式识别,图像处理,数据挖掘
  • 基金资助:
    华侨大学科研基金资助项目(10HZR06)

Abstract: This paper applies the theory of sparse representation to learn robust features. By fusing class information into the training process, it applies discriminant K-SVD algorithm to intrusion detection, which optimizes the over-completed dictionary and the linear discriminant function together. When testing, it uses the sparse coefficients as sample’s feature, which is more effective representational and discriminative power. Experimental results demonstrate that it can guarantee higher detection rate and lower false alarm rate. Meanwhile, it has good robustness in the imbalanced dataset experiment.

Key words: sparse representation, Singular Value Decomposition(SVD), Support Vector Machine(SVM), cooperation, intrusion detection

摘要: 从编码角度出发,应用稀疏理论学习鲁棒特征。在训练过程中,融合监督类别信息,采用判别式K-SVD算法,优化学习过完备字典和线性判别函数。在测试过程中,将稀疏编码系数作为数据的表示形式,以增强表示力和判别力。实验结果表明,基于判别式K-SVD的方法能获得较高的检测率,且误报率较低,对不平衡数据集也有较好的鲁棒性。

关键词: 稀疏表示, 奇异值分解, 支持向量机, 协同, 入侵检测

CLC Number: