文献类型：期刊文献

英文题名：CH-SVM based network anomaly detection

作者：Zhang, Xue-Qin[1]; Gu, Chun-Hua[1]

机构：[1] East China University of Science and Technology, Shanghai 200237, China

年份：2007

卷号：6

起止页码：3261

外文期刊名：Proceedings of the Sixth International Conference on Machine Learning and Cybernetics, ICMLC 2007

收录：EI(收录号：20080311030885)

语种：英文

外文关键词：Intrusion detection - Network security - Pattern recognition - Problem solving - Telecommunication traffic

摘要：Network Anomaly Detection is a critical task to ensure network security. With increasing network traffic, detecting network anomaly would require solving a large-scale pattern classification problem that often contains millions of training vectors. Each training vector may represent a particular signature of network traffic pattern and some of them may be linked to security breaching activities that need to be detected and eradicated. In this paper, a popular statistical learning algorithm known as the Support Vector Machine (SVM) was consider to solve the network anomaly detection problem. However, it is well known that SVM would require excessively long computing time and exceedingly large amount of memory when number of training vectors becomes huge. Hence, direct application of the standard SVM algorithm to solve large-scale network anomaly detection problems is impractical. In this paper, based on computational geometry theory, a new algorithm called convex-hull SVM (CH-SVM) was proposed, which can yield the same solution as original SVM while using significantly less training data, and hence less computing time. Then experiments were done on KDD'99 intrusion detection dataset to compare the performance of the proposed algorithm to a standard SVM and observed reduced training time and improved classification accuracy. ? 2007 IEEE.