{"title":"基于遗传算法的网络异常检测方法","authors":"Qinggang Su, Jingao Liu","doi":"10.1109/ICSAI.2017.8248437","DOIUrl":null,"url":null,"abstract":"With the rapid development of computer network application, it is increasingly important to detect abnormal behaviors and patterns in the field of network security. In this paper, a genetic algorithm is proposed to detect the network anomaly by using Management Information Base (MIB), which is based on the theory of classification using integrated IF-THEN rules. This paper presents a new chromosome coding scheme, and a new method of sufficiency function design is discussed too. Some experiments based on a big data set from real network environment were designed and tested, the results show that this algorithm is efficient in network anomaly detection.","PeriodicalId":285726,"journal":{"name":"2017 4th International Conference on Systems and Informatics (ICSAI)","volume":"8 1","pages":"0"},"PeriodicalIF":0.0000,"publicationDate":"2017-11-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":"2","resultStr":"{\"title\":\"A network anomaly detection method based on genetic algorithm\",\"authors\":\"Qinggang Su, Jingao Liu\",\"doi\":\"10.1109/ICSAI.2017.8248437\",\"DOIUrl\":null,\"url\":null,\"abstract\":\"With the rapid development of computer network application, it is increasingly important to detect abnormal behaviors and patterns in the field of network security. In this paper, a genetic algorithm is proposed to detect the network anomaly by using Management Information Base (MIB), which is based on the theory of classification using integrated IF-THEN rules. This paper presents a new chromosome coding scheme, and a new method of sufficiency function design is discussed too. Some experiments based on a big data set from real network environment were designed and tested, the results show that this algorithm is efficient in network anomaly detection.\",\"PeriodicalId\":285726,\"journal\":{\"name\":\"2017 4th International Conference on Systems and Informatics (ICSAI)\",\"volume\":\"8 1\",\"pages\":\"0\"},\"PeriodicalIF\":0.0000,\"publicationDate\":\"2017-11-01\",\"publicationTypes\":\"Journal Article\",\"fieldsOfStudy\":null,\"isOpenAccess\":false,\"openAccessPdf\":\"\",\"citationCount\":\"2\",\"resultStr\":null,\"platform\":\"Semanticscholar\",\"paperid\":null,\"PeriodicalName\":\"2017 4th International Conference on Systems and Informatics (ICSAI)\",\"FirstCategoryId\":\"1085\",\"ListUrlMain\":\"https://doi.org/10.1109/ICSAI.2017.8248437\",\"RegionNum\":0,\"RegionCategory\":null,\"ArticlePicture\":[],\"TitleCN\":null,\"AbstractTextCN\":null,\"PMCID\":null,\"EPubDate\":\"\",\"PubModel\":\"\",\"JCR\":\"\",\"JCRName\":\"\",\"Score\":null,\"Total\":0}","platform":"Semanticscholar","paperid":null,"PeriodicalName":"2017 4th International Conference on Systems and Informatics (ICSAI)","FirstCategoryId":"1085","ListUrlMain":"https://doi.org/10.1109/ICSAI.2017.8248437","RegionNum":0,"RegionCategory":null,"ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":null,"EPubDate":"","PubModel":"","JCR":"","JCRName":"","Score":null,"Total":0}
引用次数: 2
摘要
随着计算机网络应用的迅速发展,异常行为和模式的检测在网络安全领域显得越来越重要。本文基于综合IF-THEN规则分类理论,提出了一种利用管理信息库(Management Information Base, MIB)检测网络异常的遗传算法。本文提出了一种新的染色体编码方案,并讨论了一种新的充分性函数设计方法。在实际网络环境的大数据集上进行了实验设计和测试,结果表明该算法在网络异常检测中是有效的。
A network anomaly detection method based on genetic algorithm
With the rapid development of computer network application, it is increasingly important to detect abnormal behaviors and patterns in the field of network security. In this paper, a genetic algorithm is proposed to detect the network anomaly by using Management Information Base (MIB), which is based on the theory of classification using integrated IF-THEN rules. This paper presents a new chromosome coding scheme, and a new method of sufficiency function design is discussed too. Some experiments based on a big data set from real network environment were designed and tested, the results show that this algorithm is efficient in network anomaly detection.