Earticle

초록

영어

In view of the existing IDS are widespread the problem of high false alarm rate, this paper proposes a kind of alarm information filtering method of IDS based on support vector machine (SVM). The method consists of two parts, training, and data prediction. Model training including parsing command line parameters, read the training sample, select the appropriate penalty coefficient, kernel function and kernel parameter, statistical types and the number of each type of sample, sample training data grouping, using the minimum sequence optimization algorithm C - SVM classifier model. Training data to predict including read alarm data and based on the model of C - SVM classifier model calculation values of decision alarm data. Theoretical analysis and experimental data show that the rational selection of kernel function and kernel parameters and the training data set, this method can effectively reduce the intrusion detection system false alarm rate.

목차

Abstract
 1. Introduction
 2. Research Status
 3. A SVM-based IDS Alarms Filtering Method
  3.1. Analysis of the Causes of High False Alarm Rate
  3.2. Alarm Filtering and Support Vector Machine (SVM)
  3.3. C - SVM Classifier
  3.4. Feature Selecting by PCA
  3.5 Parameter Optimization Method
  3.6 False Alarm Filtering Method based on SVM
 4. Model Simulation and the Result Analysis
  4.1. Experimental Environment
  4.2. The Experimental Data Set
  4.3. Get Principal Component by using PCA
  4.4. Gaussian Kernel SVM Classifier Performance
  4.5 Polynomial Kernel SVM Classifier Performance
  4.6 Sigmoid Kernel SVM Classifier Performance
  4.7 The Experiment Results Analysis
 5. Future work
 Acknowledgements
 References

키워드

저자

• Yun Liu [ School of Electronic and Information Engineering Key Laboratory of Communication and Information Systems, Beijing Municipal Commission of Education Beijing Jiaotong University, Beijing, 100044，China ]
• Kun-Peng Xia [ School of Electronic and Information Engineering Key Laboratory of Communication and Information Systems, Beijing Municipal Commission of Education Beijing Jiaotong University, Beijing, 100044，China ]
• Jian-Xun Zhao [ School of Electronic and Information Engineering Key Laboratory of Communication and Information Systems, Beijing Municipal Commission of Education Beijing Jiaotong University, Beijing, 100044，China ]

참고문헌

발행기관

간행물

표지보기 관심저널 등록

• 간행물명

  International Journal of Security and Its Applications

• 간기

  격월간

• pISSN

  1738-9976

• 수록기간

  2008~2016

• 등재여부

  SCOPUS

• 십진분류

  KDC 505 DDC 605