系统仿真学报 ›› 2021, Vol. 33 ›› Issue (2): 331-338.doi: 10.16182/j.issn1004731x.joss.19-0361

• 仿真建模理论与方法 • 上一篇    下一篇

改进果蝇算法优化加权极限学习机的入侵检测

党建武, 谭凌   

  1. 江西财经大学 软件与物联网工程学院,江西 南昌 330013
  • 收稿日期:2019-07-29 修回日期:2019-11-28 出版日期:2021-02-18 发布日期:2021-02-20
  • 通讯作者: 谭凌(1995-),女,硕士生,研究方向为信息安全。E-mail: tanling@jjccb.com
  • 作者简介:党建武(1964-),男,博士,教授,研究方向为智能信息处理、信息安全、金融时间序列分析。E-mail: dangjianwu006@163.com

An Intrusion Detection Algorithm Based on IFOA and WELM

Dang Jianwu, Tan Ling   

  1. School of Software and Internet of Things Engineering, Jiangxi University of Finance and Economics, Nanchang 330013, China
  • Received:2019-07-29 Revised:2019-11-28 Online:2021-02-18 Published:2021-02-20

摘要: 提出一种改进的果蝇算法优化加权极限学习机入侵检测算法,利用加权极限学习机训练时间短、泛化性能好等优点,对NSL-KDD入侵检测数据集中的不均衡现象,增加少数类攻击的权重,使对网络攻击中稀有攻击的检测率比传统机器学习方法有大幅提高;用迭代步长自适应调整的果蝇优化算法,对加权极限学习机中的隐含层输入权值和偏置进行全局寻优,以避免算法陷入局部最优解,实现了对NSL-KDD入侵检测数据集的分类。实验表明:本算法对稀有攻击的检测率和分类准确率均有提高,误报率有所降低。

关键词: 入侵检测, 不均衡数据集, 加权极限学习机, 果蝇优化算法

Abstract: An intrusion detection algorithm of WELM optimized by IFOA is proposed. The advantages of short training time and good generalization performance of WELM are used, and the weight of minority attacks is increased, so that the recall rate of minority attacks in network attacks is greatly improved.The FOA with adaptive adjustment of the iterative step size is used, so the input weights and bias of the hidden layer in the WELM are globally optimized to avoid the algorithm falling into local optimal solution and realize the classification of the NSL-KDD intrusion detection data set. The experimental results show that the proposed algorithm improves the recall rate of minority attacks and the accuracy of the overall classification, and reduces the false positive rate.

Key words: intrusion detection, unbalanced data set, weighted extreme learning machine, fruit fly optimization algorithm

中图分类号: