Title :
Fuzzy Multi-Class Support Vector Machines for cooperative network intrusion detection
Author :
Zhang, Wei ; Teng, Shaohua ; Zhu, Haibin ; Du, Hongle ; Li, Xiaocong
Author_Institution :
Fac. of Comput., Guangdong Univ. of Technol., Guangzhou, China
Abstract :
A large number of noise data always exits when obtaining information through Internet, which deteriorates intrusion detection performance. In order to avoid the affection of noise data, data preprocessing needs to be done before the construction of hyperplane in Support Vector Machine (SVM). By importing fuzzy theory into SVM, a new method is proposed for cooperative network intrusion detection. Due to the various attack methods in different network protocol, a fuzzy membership function is formatted under each protocol, which means a unique Multi-Class SVM is suitable for only one network protocol. To implement this approach, a fuzzy Multi-Class-SVM-based cooperative network intrusion detection model with multi-agent architecture is presented in this paper, which is composed of three types of agents corresponding to TCP, UDP, and ICMP protocols, respectively and a statistic-based agent. Moreover, simulation experiments are performed by using KDD CUP 1999 data set while it is shown in the results that the training time can be significantly shortened, storage space requirement can be sharply reduced, and classification accuracy is improved apparently by using the SVM method preprocessing the data.
Keywords :
computer network security; fuzzy set theory; multi-agent systems; support vector machines; transport protocols; ICMP protocols; SVM method preprocessing; TCP protocols; UDP protocols; cooperative network intrusion detection; data preprocessing; fuzzy membership function; fuzzy multiclass support vector machines; multi-agent architecture; network protocol; noise data; Classification algorithms; Generators; Intrusion detection; Protocols; Sensors; Support vector machines; Training; Cooperation; Fuzzy Theory; Intrusion Detection; Protocol; Support Vector Machine;
Conference_Titel :
Cognitive Informatics (ICCI), 2010 9th IEEE International Conference on
Conference_Location :
Beijing
Print_ISBN :
978-1-4244-8041-8
DOI :
10.1109/COGINF.2010.5599802