首页|基于互信息与萤火虫算法的网络入侵特征选择

基于互信息与萤火虫算法的网络入侵特征选择

扫码查看
为减少网络入侵检测数据中的冗余特征,提出一种结合互信息和萤火虫算法的特征选择方法。针对互信息不能精确计算特征间冗余度,提出类内特征冗余互信息特征选择方法。针对萤火虫算法步长因子固定易使算法陷入局部最优等问题,提出自适应步长萤火虫算法特征选择。以上方法分别选取特征子集后利用投票策略选取最优子集,对该子集基于C4。5和贝叶斯网络分类器分类。实验结果表明,使用10个特征检测能有效提高入侵检测率、误报率和F-measure,同时还缩短训练和检测时间。此外,与现有的几种方法相比,该方法在准确率、检测率和F-measure都获得不错效果。
NETWORK INTRUSION FEATURE SELECTION BASED ON MUTUAL INFORMATION AND FIREFLY ALGORITHM
In order to reduce redundant features in network intrusion detection data,this paper proposes a feature selection method based on mutual information and firefly algorithm.Aimed at the imprecision calculation of redundancy between features for mutual information,a feature selection method for inner class feature redundancy mutual information was proposed.In order to solve the problem that the fixed step factor in firefly algorithm made the algorithm fall into local optimum,the feature selection of adaptive step size firefly algorithm was proposed.After the feature subset was selected by the above methods,the optimal subset was selected by using the voting strategy.The intrusion detection based on C4.5 and Bayesian network classifier was carried out for this subset.The experimental results show that using 10 features can effectively improve the intrusion detection rate,false alarm rate and F-Measure,and also shorten the training and detection time.In addition,compared with the existing methods,this method achieves good results in accuracy,detection rate and F-Measure.

Network intrusion detectionFeature selectionVoting strategyMutual informationFirefly algorithm

王新胜、杨锐

展开 >

江苏大学计算机科学与通信工程学院 江苏镇江 212013

网络入侵检测 特征选择 投票策略 互信息 萤火虫算法

国家自然科学基金项目江苏省自然科学基金青年项目

61402205BK20190838

2024

计算机应用与软件
上海市计算技术研究所 上海计算机软件技术开发中心

计算机应用与软件

CSTPCD北大核心
影响因子:0.615
ISSN:1000-386X
年,卷(期):2024.41(4)
  • 20