基于引力入侵检测方法.pdf

Vol. 17 No. 9 • 2202 • JOURNAL OF SYSTEM SIMULATION Sept. 2005 1,2 2 1 2 ( 510420 430074) : GBIDGBID GBID KDDCUP99 GBID 1004-731X(2005)09-2202-05 TP309 A Gravity-based Intrusion Detection Approach JIANG Sheng-yi 1,2 , LI Qing-hua 2 1 ( School of Informatics ,Guangdong University of Foreign Studies ,Guangzhou 510420, China 2Computer School, Huazhong University of Science Technology, Wuhan 430074, China) Abstract: The idea of universal gravitation was introduced to clustering analysis, and a gravity-based clustering algorithm and a simple method calculating clustering threshold were presented. The gravity factor measured deviating degree of a cluster and a new intrusion detection approach, which named GBID, were proposed. Time complexity of the detection approach is nearly linear with the size of dataset and the number of attributes, which results in good scalability. The experimental results on dataset KDDCUP99 show that GBID outperforms the existing unsupervised intrusion detection approaches on accuracy and has capability to detect unknown intrusions. Key words: Universal gravitation; Clustering; Gravity factor; Intrusion detection * Portnoy[4]Eskin[5], ()