现代电子技术
現代電子技術
현대전자기술
Modern Electronics Technique
2015年
23期
80-84
,共5页
自组织映射%神经网络%ROC曲线%入侵检测%聚类分析
自組織映射%神經網絡%ROC麯線%入侵檢測%聚類分析
자조직영사%신경망락%ROC곡선%입침검측%취류분석
self-organization mapping%neural network%ROC curve%intrusion detection%clustering analysis
入侵检测作为保障互联网安全的主要措施之一，对于网络入侵的识别和诊断有着重要的意义。将自组织映射（SOM）的思想引入网络入侵检测中，提出了一种基于SOM的网络入侵检测算法。算法通过对SOM神经网络中输出神经元的邻域密度进行排名，同时结合受试者工作特征（ROC）曲线设置邻域密度阈值等方法，使得入侵检测的结果通过输出神经元的邻域密度进行表达，克服了SOM神经网络训练时容易产生畸变导致输出神经元自身的聚类结果难以理解的缺点。通过对算法仿真实验，表明该算法不仅有效而且拥有相当可观的检测率。
入侵檢測作為保障互聯網安全的主要措施之一，對于網絡入侵的識彆和診斷有著重要的意義。將自組織映射（SOM）的思想引入網絡入侵檢測中，提齣瞭一種基于SOM的網絡入侵檢測算法。算法通過對SOM神經網絡中輸齣神經元的鄰域密度進行排名，同時結閤受試者工作特徵（ROC）麯線設置鄰域密度閾值等方法，使得入侵檢測的結果通過輸齣神經元的鄰域密度進行錶達，剋服瞭SOM神經網絡訓練時容易產生畸變導緻輸齣神經元自身的聚類結果難以理解的缺點。通過對算法倣真實驗，錶明該算法不僅有效而且擁有相噹可觀的檢測率。
입침검측작위보장호련망안전적주요조시지일，대우망락입침적식별화진단유착중요적의의。장자조직영사（SOM）적사상인입망락입침검측중，제출료일충기우SOM적망락입침검측산법。산법통과대SOM신경망락중수출신경원적린역밀도진행배명，동시결합수시자공작특정（ROC）곡선설치린역밀도역치등방법，사득입침검측적결과통과수출신경원적린역밀도진행표체，극복료SOM신경망락훈련시용역산생기변도치수출신경원자신적취류결과난이리해적결점。통과대산법방진실험，표명해산법불부유효이차옹유상당가관적검측솔。
Intrusion detection is one of the main measures to ensure the Internet safety,and has important significance to recognize and diagnose the network intrusion. In this paper,the thought of self?organization mapping(SOM)is introduced into the network intrusion detection,and a network intrusion detection algorithm based on SOM is proposed. The neighborhood densi?ty of output neurone in SOM neural network is ranked. The method of setting the neighborhood density threshold in combination with receiver operating characteristic(ROC)curve makes the intrusion detection results express by neighborhood density of the output neurone. The disadvantage that the clustering results of output neurone itself are hard to understand has been overcome, which is caused by the distortion generating in SOM neural network training. The simulation experiments of the algorithm show that the algorithm is effective,and has appreciable detection rate.
