CAJ | 학술논문

针对传统的入侵检测模型IDM（Intrusion Detection System）不能检测最新的入侵手段且系统的特征数据库需要频繁更新的问题，提出融合K-均值聚类、模糊神经网络和支持向量机等数据挖掘技术来构建IDM。首先，利用K-均值聚类将原始的训练集划分为不同的训练子集；然后，基于各训练子集训练各自的模糊神经网络模型，并通过模糊神经网络模型生成支持向量机的支持向量；最后，采用径向支持向量机检测入侵行为是否发生。在KDD CUP 1999数据集上的实验验证了所提模型的有效性及可靠性。实验结果表明，相比其他几种较为先进的检测方法，所提模型在入侵检测方面取得了更高的检测精度。
침대전통적입침검측모형IDM（Intrusion Detection System）불능검측최신적입침수단차계통적특정수거고수요빈번경신적문제，제출융합K-균치취류、모호신경망락화지지향량궤등수거알굴기술래구건IDM。수선，이용K-균치취류장원시적훈련집화분위불동적훈련자집；연후，기우각훈련자집훈련각자적모호신경망락모형，병통과모호신경망락모형생성지지향량궤적지지향량；최후，채용경향지지향량궤검측입침행위시부발생。재KDD CUP 1999수거집상적실험험증료소제모형적유효성급가고성。실험결과표명，상비기타궤충교위선진적검측방법，소제모형재입침검측방면취득료경고적검측정도。
For the issues that traditional intrusion detection model (IDM)can not detect latest intrusion means and requires frequent update of its feature database,we propose to build IDM by fusing the data mining technologies of k-means clustering,fuzzy neural networks and support vector machine.First,the original training set is divided into different training subsets using k-means clustering.Then,each training subset trains its own fuzzy neural network model respectively based on itself and generates support vector of SVM through fuzzy neural network model.Finally,radial SVM is adopted to detect whether the intrusion action occurs.The effectiveness and reliability of the proposed model has been verified by experiments on KDD CUP 1999 dataset.Experimental results show that the proposed model achieves higher accuracy in intrusion detection comparing with some other advanced detection approaches.