Intrusion detection model based on fuzzy theory and association rules

Jianwu ZHANG; Jiasen HUANG; Di ZHOU

doi:10.11959/j.issn.1000-0801.2019077

您当前的位置：

首页 >

文章列表页 >

Intrusion detection model based on fuzzy theory and association rules

research and development | 更新时间：2024-06-05

- Intrusion detection model based on fuzzy theory and association rules
- Telecommunications Science Vol. 35, Issue 5, Pages: 59-69(2019)
- 作者机构：
  
  1. 杭州电子科技大学，浙江杭州 310018
  2. 浙江宇视科技有限公司，浙江杭州 310018
- 作者简介：
- 基金信息：
- DOI：10.11959/j.issn.1000-0801.2019077
  CLC： TP393
- Published Online：2019-05，
  
  Published：20 May 2019
- 稿件说明：
移动端阅览
Jianwu ZHANG, Jiasen HUANG, Di ZHOU. Intrusion detection model based on fuzzy theory and association rules[J]. Telecommunications science, 2019, 35(5): 59-69.
DOI：

Jianwu ZHANG, Jiasen HUANG, Di ZHOU. Intrusion detection model based on fuzzy theory and association rules[J]. Telecommunications science, 2019, 35(5): 59-69. DOI： 10.11959/j.issn.1000-0801.2019077.

摘要

利用 BV-Apriori 算法生成匹配规则库，引入模糊集合技术解决连续型数据划分过程中边界过硬的问题，完成特征之间关系的实时分析与规则库的更新，搭建入侵检测BVA-IDS（Boolean vector Apriori-intrusion detection system）模型。研究结果表明，相比顺序生成频繁项集的Apriori算法与已有文献的Apriori-BR算法，本文的BV-Apriori算法挖掘效率显著地提高；相比已有文献的检测模型，本文的BVA-IDS模型在入侵检测指标上表现较好，有较高的检测准确性与较低的误检率和漏检率。

Abstract

An intrusion detection model based on fuzzy theory and improved Apriori algorithm was proposed.The BV-Apriori algorithm was used to generate the matching rule base

and the problem of excessive boundary in the continuous data partitioning process was solved by fuzzy set technology.The real-time analysis of the relationship between features and the update of the rule base were completed

and the intrusion detection model BVA-IDS (Boolean vector Apriori-intrusion detection system) was built.The results show that the mining efficiency of the BV-Apriori algorithm is significantly improved when compared with the existing Apriori-BR algorithm

in addition

the BVA-IDS model also performs well on intrusion detection indicators with high detection accuracy

and low false positive rate and false negative rate.

关键词

Keywords

references

DENNING D E . An intrusion-detection model [J ] . IEEE Transactions on Software Engineering , 1987 , SE-13 ( 2 ): 222 - 232 .

AGRAWAL R , IMIELINSKI T , SWAMI A N . Mining association rules between sets of items in large databases [C ] // The 1993 ACM SIGMOD International Conference on Management of Data,May 26-28,1993,New York,USA . New York:ACM Press , 1993 : 207 - 216 .

AGRAWAL R , SRIKANT R . Fast algorithms for mining association rules [M ] . New York : ACM PressPress , 1994 : 487 - 499 .

ADITYA S P , HEMANTH M , LAKSHMIKANTH C K , et al . Effective algorithm for frequent pattern mining [C ] // International Conference on IoT and Application,May 19-20,2017,Nagapattinam,India . Piscataway:IEEE Press , 2017 .

LI L , LI Q , WU Y , et al . Mining association rules based on deep pruning strategies [J ] . Wireless Personal Communications , 2018 ( 2 ): 1 - 25 .

XIAO M , YIN Y , ZHOU Y , et al . Research on improvement of apriori algorithm based on marked transaction compression [C ] // Advanced Information Technology,Electronic and Automation Control Conference,March 25-26,2017,Chongqing,China . Piscataway:IEEE Press , 2017 : 1067 - 1071 .

黄玉蕾 , 罗晓霞 , 林青 . 基于位运算和倒排索引的关联规则挖掘算法 [J ] . 电信科学 , 2015 , 31 ( 11 ): 81 - 86 .

HUANG Y L , LUO X X , LIN Q . An association rule mining scheme based on bit operation and reverse index [J ] . Telecommunications Science , 2015 , 31 ( 11 ): 81 - 86 .

CHANA G Y , CHUAA F F , LEEB C S . Fuzzy association rules vs fuzzy associative patterns in defending against Web service attacks [C ] // International Conference on Fuzzy Systems and Knowledge Discovery,August 13-15,2016,Changsha,China . Piscataway:IEEE Press , 2016 : 524 - 529 .

张春琴 , 谢立春 . 云环境中改进 FCM 和规则参数优化的网络入侵检测方法 [J ] . 电信科学 , 2018 , 34 ( 1 ): 72 - 79 .

ZHANG C Q , XIE L C . Network intrusion detection method based on improved FCM and rule parameter optimization in cloud environment [J ] . Telecommunications Science , 2018 , 34 ( 1 ): 72 - 79 .

JIAO W , LI Q . Anomaly detection based on fuzzy rules [J ] . International Journal of Performability Engineering , 2018 , 14 ( 2 ): 376 - 385 .

MABU S , CHEN C , LU N , et al . An intrusion-detection model based on fuzzy class-association-rule mining using genetic network programming [J ] . IEEE Transactions on Systems Man ＆Cybernetics Part C , 2010 , 41 ( 1 ): 130 - 139 .

高妮 , 高岭 , 贺毅岳 , 等 . 基于自编码网络特征降维的轻量级入侵检测模型 [J ] . 电子学报 , 2017 ( 3 ): 730 - 739 .

GAO N , GAO L , HE Y Y , et al . A lightweight intrusion detection model based on auto encoder network with feature reduction [J ] . Acta Electronica Sinica , 2017 ( 3 ): 730 - 739 .

KUMAR S . Classification and detection of computer intrusions [D ] . West Lafayette:Purdue University , 1995 .

MADBOULY A I , GODY A M , BARAKAT T M . Relevant feature selection model using data mining for intrusion detection system [J ] . International Journal of Engineering Trends ＆Technology , 2014 , 9 ( 10 ): 804 - 811 .

Views

229

下载量

CSCD

Alert me when the article has been cited

提交

Tools

Publicity Resources

Attack detection model based on stacking ensemble learning for Internet of vehicles

An intrusion detection model based on convolution neural network for Internet of vehicles

A network intrusion detection method designed for few-shot scenarios

An Association Rule Mining Scheme Based on Bit Operation and Reverse Index

Broadcasting Bidirectional Access Network Intrusion Detection System Facing Tri-Networks Integration

Related Author

ZHANG Sha

FANG Long

XU Huibin

ZHANG Rui

Congyuan XU

Xiaolin WANG

Zhiqiang WANG

Weichen HU

Related Institution

School of Information Engineering, Huzhou University

Department of Information Engineering, Zhumadian Vocatiomal and Technical College

ZTE Telecommunications College,Xi'an Peihua University

School of Computer Science and Technology,Xi'an University of Science and Technology

The Information Engineering University

⁰