| 本文已被：浏览 5592次 下载 7318次 |
码上扫一扫！ |
|
|
| 基于改进的随机森林算法的入侵检测模型 |
|
郭山清1,2, 高丛3, 姚建1,2, 谢立1,2
|
|
1.南京大学,计算机软件新技术国家重点实验室,江苏,南京,210093;2.南京大学,计算机科学与技术系,江苏,南京,210093;3.Department of Computer Science,University of Auckland,Auckland,1020,New Zealand
|
|
| 摘要: |
| 针对现有入侵检测算法对不同类型的攻击检测的不均衡性和对攻击的响应时间较差的问题.将随机森林算法引入到入侵检测领域,构造了基于改进的随机森林算法的入侵检测模型,并把这种算法用于基于网络连接信息的数据的攻击检测和异常发现.通过对DARPA数据的入侵检测实验,其结果表明,基于改进的随机森林算法的入侵检测模型是可行的、高效的,对数据集DARPA中所包含的4种类型的攻击检测具有良好的均衡性. |
| 关键词: 入侵检测 随机森林算法 分类树 进化算法 |
| DOI： |
| 分类号: |
| 基金项目:Supported by the Natural Foundation of Jiangsu Province of China under Grant No.BK2002073 (江苏省自然科学基金); the National High-Tech Research and Development Plan of China under Grant No.2003AA142010 (国家高技术研究发展计划(863)) |
|
| An Intrusion Detection Model Based on Improved Random Forests Algorithm |
|
GUO Shan-Qing,GAO Cong,YAO Jian,XIE Li
|
| Abstract: |
| Coupled with the explosion of number of the network-oriented applications, Intrusion Detection as an increasingly popular area is attracting more and more research efforts. Although a number of algorithms have already been presented to tackle this problem, they are unable to achieve balanced detection performance for different types of intrusion and cannot respond as quickly as expected. Employing random forests algorithm (RFA)in intrusion detection, this paper devises an improved variation - IRFA and presents an IRFA based model for intrusion detection in information exchanged through network connections. The feasibility in balanced detection and the effectiveness of this approach are verified by experiments based on DARPA data sets. |
| Key words: intrusion detection random forests algorithm classified tree evolutionary algorithm |
