宋群, 张骏, 智永锋. 基于集成PU学习数据流分类的入侵检测方法[J]. 微电子学与计算机, 2013, 30(7): 173-176.
引用本文: 宋群, 张骏, 智永锋. 基于集成PU学习数据流分类的入侵检测方法[J]. 微电子学与计算机, 2013, 30(7): 173-176.
SONG Qun, ZHANG Jun, ZHI Yongfeng. Dynamic Classifier Ensemble for Intrusion Detection Based on Positive Unlabeled Learning[J]. Microelectronics & Computer, 2013, 30(7): 173-176.
Citation: SONG Qun, ZHANG Jun, ZHI Yongfeng. Dynamic Classifier Ensemble for Intrusion Detection Based on Positive Unlabeled Learning[J]. Microelectronics & Computer, 2013, 30(7): 173-176.

基于集成PU学习数据流分类的入侵检测方法

Dynamic Classifier Ensemble for Intrusion Detection Based on Positive Unlabeled Learning

  • 摘要: 入侵检测问题可以模型化为数据流分类问题,传统的数据流分类算法需要标注大量的训练样本,代价昂贵,降低了相关算法的实用性。在PU学习算法中,仅需标注部分正例样本就可以构造分类器。对此本文提出一种动态的集成PU学习数据流分类的入侵检测方法,只需要人工标注少量的正例样本,就可以构造数据流分类器。在人工数据集和真实数据集上的实验表明,该方法具有较好的分类性能,在处理偏斜数据流上优于三种PU 学习分类方法,并具有较高的入侵检测率。

     

    Abstract: The intrusion detection problem could be modeled as data stream classification problem.For traditional data stream classification algorithms,a lot of labeled training samples should be provided to train the classifier,with a high expense,and decrease the utility of the algorithms.For positive unlabeled learning (PU Learning) based algorithms,only positive and unlabeled samples are required to train classifier.In this paper,we propose to use dynamic classifier ensemble of PU learning algorithm to cope with intrusion detection,which only requires label some positive samples for building data stream classifier. The experiment result on both synthetic and real-life dataset shows that the proposed algorithm has excellent classification performance,and it outperforms 3 PU learning algorithms on data streams with shewed distribution,with high intrusion detection ratio.

     

/

返回文章
返回