自适应AP聚类算法及其在入侵检测中的应用江颉.pdfVIP

36 11 Vol.36 No. 11 2015 11 Journal on Communications November 2015 doi:10.11959/j.issn.1000-436x.2015242 AP 310023 AP affinity propa- gation 2 TP309 A Adaptive AP clustering algorithm and its application on intrusion detection JIANG Jie, WANG Zhuo-fang, CHEN Tie-ming, ZHU Chen-chen, CHEN Bo (College of Computer Sci. Tech., Zhejiang University of Technology, Hangzhou 310023, China) Abstract: The massive traffic of network data flow deteriorates the real-time performance for intrusion detection system, therefore compressing the train data can speed up the efficiency on unknown sample classification. As to improve the speed of data compressing and clustering on large volume of dataset, an improved adaptive affinity propagation method is proposed. The samples closer to the cluster center are directly linked to the center without clustering, which can sharply reduce the final cluster amounts as well as the full cost of clustering. Then the clustering parameters can be continuously adjusted depending on the cluster associations to refine the clustering result. Application analysis results on two datasets of intrusion detection demonstrate that the proposed method can identify the representative samples from the initial large amount of data, and speed up the efficiency of detection without reducing the model accuracy. Key words: intrusion detection; sample; clustering; affinity propagation; adaptive [3~5]