Intrusion detection can be essentially regarded as a classification problem,namely,distinguishing normal profiles from intrusive behaviors.This paper introduces boosting classification algorithm into the area of intrusion detection to learn attack signatures.Decision tree algorithm is used as simple base learner of boosting algorithm.Furthermore,this paper employs the Principle Component Analysis(PCA)approach,an effective data reduction approach,to extract the key attribute set from the original high-dimensional network traffic data.KDD CUP 99 data set is used in these exDeriments to demonstrate that boosting algorithm can greatly improve the clas.sification accuracy of weak learners by combining a number of simple"weak learners".In our experiments,the error rate of training phase of boosting algorithm is reduced from 30.2%to 8%after 10 iterations.Besides,this Daper also compares boosting algorithm with Support Vector Machine(SVM)algorithm and shows that the classification accuracy of boosting algorithm is little better than SVM algorithm's.However,the generalization ability of SVM algorithm is better than boosting algorithm.
NETL
NSTL
万方数据
维普
