基于信息密度贝叶斯算法的云平台入侵检测

doi:10.16182/j.issn1004731x.joss.201802042

系统仿真学报 ›› 2018, Vol. 30 ›› Issue (2): 714-722.doi: 10.16182/j.issn1004731x.joss.201802042

基于信息密度贝叶斯算法的云平台入侵检测

杜晔, 张田甜, 黎妹红

北京交通大学计算机与信息技术学院,北京 100044

收稿日期:2015-12-23 出版日期:2018-02-08 发布日期:2019-01-02
作者简介:杜晔(1978-),男,黑龙江,博士,副教授,博导,研究方向为网络安全、可靠性分析;张田甜(1990-), 男, 河南, 硕士生, 研究方向为云平台入侵检。
基金资助:
中央高校基本科研业务费(2014JBM030), 北京高校青年英才计划基金(YETP0548)

Information Density based Bayes Algorithm for Cloud Platform Intrusion Detection

Du Ye, Zhang Tiantian, Li Meihong

School of Computer and Information Technology, Beijing Jiaotong University, Beijing 100044, China

Received:2015-12-23 Online:2018-02-08 Published:2019-01-02

摘要/Abstract

摘要： 为更好实现对云平台入侵检测数据的分类处理,提升检测精度和性能,提出了一种基于信息密度的贝叶斯算法。构造完整的数据特征概率集合,通过引入信息熵来表示信息的不确定度,并定义了信息密度以描述信息不确定度分布状态。对算法的收敛性和时间复杂度进行了分析,并进行仿真实验,与已有技术相比,方法可有效减少数据信息损失和描述数据特征与数据类型的概率关系,能够准确将云平台入侵检测数据分类,具有较高的检测率和较低的误报率。

关键词: 云平台, 入侵检测, 数据特征, 信息密度, 贝叶斯算法

Abstract: For getting better data classification results of cloud platform intrusion detection, and improving the detection accuracy and performance, a Bayes algorithm based on information density was proposed. The complete probability of data characteristics was constructed, and the uncertainty of information was represented by information entropy. The information density was defined to describe the distribution of information uncertainty. The improved algorithm was introduced, and the convergence and time complexity were analyzed. The simulation experiment results show that the method can effectively reduce the data loss and exposethe relationship between data characteristics and data type, which can further classify the detection data of cloud platform accurately with high detection rate and low false positive rate.

Key words: cloud platform, intrusion detection, data characteristics, information density, Bayes algorithm

中图分类号:

TP309.2

杜晔, 张田甜, 黎妹红. 基于信息密度贝叶斯算法的云平台入侵检测[J]. 系统仿真学报, 2018, 30(2): 714-722.

Du Ye, Zhang Tiantian, Li Meihong. Information Density based Bayes Algorithm for Cloud Platform Intrusion Detection[J]. Journal of System Simulation, 2018, 30(2): 714-722.

参考文献 14

[1]	娄伟. 云计算环境下用户信息安全策略研究[D]. 长春: 东北师范大学, 2013.Lou Wei. Research on User Information Security Strategy in Cloud Computing Environment[D]. Changchun: Northeast Normal University, 2013.
[2]	Esposito M, Oliviero F, Mazzariello C, et al.Evaluating Pattern Recognition Techniques in Intrusion Detection Systems[C]//Proceedings of the 5th International Workshop on Pattern Recognition in Information Systems, USA, 2005: 144-153.
[3]	Modi C N, Patel D R, Patel A, et al.Bayesian Classifier and Snort based network intrusion detection system in cloud computing[C]//. Proceedings of 2012 International Conference on Computing Communication & Networking Technologies, India, 2012: 1-7.
[4]	Kumar P, Nitin N, Sehgal V, et al.A novel approach for security in Cloud Computing using Hidden Markov Model and clustering[C]//. Proceedings of 2011 World Congress onInformation and Communication Technologies, India, 2011: 810-815.
[5]	Vieira K, Schulter A, Westphall C, et al.Intrusion Detection for Grid and Cloud Computing[J]. It Professional (S1520-9202), 2010, 12(4): 38-43.
[6]	袁凯. 云计算环境下的监控系统设计与实现[D]. 武汉: 华中科技大学, 2012.Yuan Kai. Design and Implementation of Monitoring System Based on Cloud[D]. Wuhan: Huazhong University of Science and Technology, 2012.
[7]	范仕伦, 薛天俊, 夏玮. 基于贝叶斯算法和费舍尔算法的垃圾邮件过滤系统设计与实现[J]. 信息网络安全, 2012, 24(9): 18-22.Fan Shilun, Xun Tianjun, Xia Wei. Spam Email Filter System based on Bayesian Algorithm and Fisher Algorithm Design and Implementation[J]. Netinfo Security, 2012, 24(9): 18-22.
[8]	赵姝, 吕靖, 张燕平. 不完整数据集的信息熵集成分类算法[J]. 模式识别与人工智能, 2014, 25(3): 193-198.Zhao Shu, Lv Jing, Zhang Yanping. Information Entropy Ensemble Classification Algorithm for Incomplete Data[J]. Pattern Recognition and Artificial Intelligence, 2014, 25(3): 193-198.
[9]	李太福, 熊隽迪. 基于梯度下降法的自适应模糊控制系统研究[J]. 系统仿真学报, 2007, 19(6): 1265-1268.Li Taifu, Xiong Jundi. Study on Adaptive Fuzzy Control System Based on Gradient Descent Learning Algorithm. Journal of System Simulation, 2007, 19(6): 1265-1268.
[10]	孙妮妮. 基于正态云模型重叠度的相似性度量研究及其应用[D]. 太原:太原理工大学, 2015.Sun Nini. Research and Application of Similarity Measurement between Normal Cloud Models based on Overlap Degree[D]. Taiyuan: Taiyuan University of Technology, 2015.
[11]	张新有, 曾华燊, 贾磊. 入侵检测数据集KDD CUP99研究[J]. 计算机工程与设计, 2010, 31(22): 4809-4812.Zhang Xinyou, Zeng Huayi, Jia Lei. Research of intrusion detection system dataset-KDD CUP99[J]. Computer Engineering and Design, 2010, 31(22): 4809-4812.
[12]	董元方, 李雄飞, 李军, 等. 基于分辨粒度的gROC曲线分析方法[J]. 软件学报, 2013, 24(1): 109-120.Dong Yuanfang, Li Xiongfei, Li Jun, et al. gROC Curve Analysis Method Based on Discernible Granularity. Journal of Software, 2013, 24(1): 109-120.
[13]	刘敬, 谷利泽, 钮心忻, 等. 基于神经网络和遗传算法的网络安全事件分析方法[J]. 北京邮电大学学报, 2015, 38(2): 50-54.Liu Jing, Gu Lize, Niu Xinxin, et al. Network Security Events Analyze Method Based on Neural Networks and Genetic Algorithm[J]. Journal of Beijing University of Posts and Telecommunications, 2015, 38(2): 50-54.
[14]	王飞, 秦小麟, 刘亮. 基于数据流的k-近邻连接算法[J]. 计算机科学, 2015, 42(5): 204-210.Wang Fei, Qin Xiaolin, Liu Liang. Algorithm for k-Nearest Neighbor Join Based on Data Stream[J]. Computer Science, 2015, 42(5): 204-210.

基于信息密度贝叶斯算法的云平台入侵检测

Information Density based Bayes Algorithm for Cloud Platform Intrusion Detection

PDF (PC)

可视化

摘要/Abstract

引用本文

使用本文

参考文献 14

相关文章 7

编辑推荐

Metrics

本文评价

[1]	林硕, 安磊, 高治军, 单丹, 尚文利. 结合栈式自编码及长短时记忆的入侵检测研究[J]. 系统仿真学报, 2021, 33(6): 1288-1296.
[2]	党建武, 谭凌. 改进果蝇算法优化加权极限学习机的入侵检测[J]. 系统仿真学报, 2021, 33(2): 331-338.
[3]	张天瀛, 姬杭, 周军华, 陶栾. 云端工具集成和管理方法研究[J]. 系统仿真学报, 2021, 33(12): 2911-2918.
[4]	石瑞杰, 邹萍, 吴夕科, 刘刚, 高晨, 张俊媛, 李琳, 郭立. 电工装备行业云端协同制造及仿真应用研究[J]. 系统仿真学报, 2019, 31(4): 771-786.
[5]	张靖, 王衡军, 李俊全, 郁滨. 基于空间和时间密度的入侵报警聚合研究[J]. 系统仿真学报, 2016, 28(6): 1336-1343.
[6]	薛胜军, 张佩云, 陈静怡. 云平台下基于半朴素贝叶斯的降雨量预测[J]. 系统仿真学报, 2016, 28(5): 1117-1123.
[7]	周利敏, 傅妍芳, 高武奇, 高祥, 程兵. 基于云仿真平台的高可用技术研究[J]. 系统仿真学报, 2015, 27(4): 786-793.