详细信息

基于PCA和KPCA特征抽取的SVM网络入侵检测方法  ( EI收录)  

PCA/KPCA Feature Extraction Approach to SVM for Anomaly Detection

文献类型:期刊文献

中文题名:基于PCA和KPCA特征抽取的SVM网络入侵检测方法

英文题名:PCA/KPCA Feature Extraction Approach to SVM for Anomaly Detection

作者:高海华[1];杨辉华[1];王行愚[1]

机构:[1]华东理工大学信息科学与工程学院,上海200237

年份:2006

卷号:32

期号:3

起止页码:321

中文期刊名:华东理工大学学报(自然科学版)

外文期刊名:Journal of East China University of Science and Technology

收录:CSTPCD;;EI(收录号:2006189857121);Scopus;北大核心:【北大核心2004】;CSCD:【CSCD2011_2012】;

基金:国家自然科学基金项目(69974014);教育部高校博士点基金项目(20040251010)

语种:中文

中文关键词:异常检测;特征抽取;主分量分析(PCA);核主分量分析(KPCA);支持向量机;(SVM)

外文关键词:anomaly detection ; feature extraction ; principal components analysis (PCA) ; kernel prin cipal components analysis(KPCA) ; support vector machines(SVM)

摘要:提出一种新颖的基于特征抽取的异常检测方法,应用主分量分析(PCA)和核主分量分析(KPCA)抽取入侵特征,再应用支持向量机(SVM)检测入侵。其中PCA对输入特征做线性变换,而KPCA通过核函数进行非线性变换。利用KDD 99数据集,将PCA-SVM、KPCA-SVM与SVM、PCR、KPCR进行比较,结果显示:在不降低分类器性能的情况下,特征抽取方法能对输入数据有效降维。在各种方法中,KPCA与SVM的结合能得到最优入侵检测性能。
Feature selection and feature extraction are two kinds of dimensionality reduction techniques to boost classifiers' performance. Very little work on feature extraction is taken in the field of network anomaly detection. This paper applies principal component analysis (PCA) and kernel prncipal component analysis(KPCA) to network intrusion feature extraction. The extracted features are employed by SVM for classification. PCA linearly transforms the original inputs into new uncorrelated features while KPCA is an nonlinear generalization of the linear PCA using the kernal method. The MIT's KDD Cup 99 dataset is used to evaluate these feature extraction methods, and classification performances achieved by SVM with PCA and KPCA feature extraction are compared with those obtained by principal component regression (PCR) and kernel principal component regression(KPCR) classification methods and by SVM without application of feature extraction. The results clearly demonstrate that feature extraction can greatly reduce the dimensionality of feature space witout degrading the claaifiers' performance. Among these methods, the best performance is achieved by SVM using only the first four principal components cxtracted by KPCA.

参考文献:

正在载入数据...

版权所有©华东理工大学 重庆维普资讯有限公司 渝B2-20050021-7 
渝公网安备 50019002500408号 违法和不良信息举报中心