文献类型：期刊文献

中文题名：一种网络入侵检测特征提取方法

英文题名：A Method to Extract Network Intrusion Detection Feature

作者：张雪芹[1];顾春华[1]

机构：[1]华东理工大学信息科学与工程学院,上海200237

年份：2010

卷号：38

期号：1

起止页码：81

中文期刊名：华南理工大学学报（自然科学版）

外文期刊名：Journal of South China University of Technology(Natural Science Edition)

收录：CSTPCD;;EI(收录号：20101312808575);Scopus;北大核心:【北大核心2008】；CSCD:【CSCD2011_2012】；

基金：国家自然科学基金资助项目(60773094)

语种：中文

中文关键词：入侵检测系统;特征选取;Fisher分;支持向量机

外文关键词：intrusion detection system; feature extraction ; Fisher score; support vector machine

摘要：为了去除冗余特征,降低系统存储和运算负担,提高网络入侵检测分类器的性能,文中提出了一种基于Fisher分和支持向量机的网络入侵检测特征提取方法.针对KDD′99网络入侵检测数据集,应用该方法得到了混合攻击和4种单一攻击模式下的特征重要度排序,选取重要特征建立支持向量机入侵检测分类器.结果表明,该分类器精度与使用全部特征构建的支持向量机分类器相当,训练和测试时间则显著降低.
In order to eliminate redundant features, reduce the system burden of storage and computation, and improve the performance of the classifier for network intrusion detection, a method to extract network intrusion detection feature is proposed based on the Fisher score and the support vector machine （SVM）. Then, in accordance with KDD＇99 network intrusion detection dataset, the feature significance rankings for the mixed attack and four single attacks are respectively obtained by using the proposed method. By extracting important features, a SVM classifier is thus constructed. Experimental results show that, as compared with the classifier constructed based on all features, the new classifier is of approximately equivalent accuracy and dramatically low training and testing time cost.