基于粗糙集和OnlineSVM的入侵检测规则提取.pdfVIP

and 3771 计葬枧王程慧设诗ComputerEngineeringDesign 2009，30(16) ·辖惠安全技术· 基于粗糙集和OnlineSVM的入侵检测规则提取 扶宗爻， 置键， 博蹊 (-R涉瑾盖走学诗雾瓿奄通信美嚣擎院，湖惫长涉410114) 獾要：黠璃络入侵撬剐螃徐溅提蠹了一耱基掌瓤凝壤和Online．SVM结合秘方法．赞对瓣络连接记录特莅属经毒维酸特 点，采煎趣糙集属拣黪簿的方法滕缩数据淀阏，农宥簿髂惠零爱强失的旃提下降低了数糖憩壤砖娩模，丧建OnlineSVM方法 对数据进行训练辩，攥舞祷统方法需要离鹰薰亩l|臻样本砖假设，采用样本实时更耨的方涤对数糖进行实崤分类碱练、检溪4。 试验结暴表鼹，谈雳滚帮璐减小辩游开镶，劳饿规娥提取葵有实辩挫，符合现实工作的簧求． 关键谲：网络安全；入侵检测；拙糙集；支持向量机；机器学习 中国法分类号：TP393．08波黻标识鹌：A 文纛编鼍：1000-7024(2009)16-3771．03 Intrusiondetectionrulesextractionbasedon setandOnlineSVM rough FU Jian，FU Zong—Well，WANGMing of andCommunication ofScienceand (Institute Computer Engineering，ChangshaUniversity Technology, 4101 Changsha14，China) Abstract：Amethodofnetworkintrusionrulesdetectionbasedon setandOnlineSVMcombinationis to rough thecharacteristicsofthenetworkconnectionfor themethod setattributereductionto data ofrough high-dimension,using compressspace， itreducesthesize ofusefulinformation ofthe whilethe isnotlost。Whenittrainsthedataonline data-processingpremise by SVM，it abandonsthetraditionalmethod onthe usesthemethod real-timefor ofneedinghigh—qualitysamplesassumption，it ofupdatingsamples real-timedata indicatesthatthis classificationand methodcallreducetheCOStoftimeandmakethe强- trainingtesting．Theexperiment tractionrulewith linewiththe ofthe ofwork