doi: 10.4304/jsw.6.12.2350-2360
An Efficient Hybrid Clustering-PSO Algorithm for Anomaly Intrusion Detection
- College of Computer Science and Engineering, Chongqing University, Chongqing 400044, China
Abstract
Generally speaking, in anomaly intrusion detection, modeling the normal behavior of activities performed by a user or a program is an important issue. Currently most machine-learning algorithms which are widely used to establish user’s normal behaviors need labeled data for training first, so they are computational expensive and sometimes misled by artificial data. This study proposes a PSO-based optimized clustering method IDCPSO for modeling the normal patterns of a user’s activities which combines an unsupervised clustering algorithm with the PSO technique, PSO algorithm is used to optimize the clustering results and obtain the optimal detection result. IDCPSO needs unlabeled data for training and automatically establishes clusters so as to detect intruders by labeling normal and abnormal groups. The famous KDD Cup 1999 dataset is used to evaluate the proposed system. In addition, we compare the performance of PSO optimization process with GA.
Keywords
- PSO
- Unsupervised Clustering
- Anomaly In
How to Cite
Hongying Zheng, Meiju Hou, and Yu Wang, "An Efficient Hybrid Clustering-PSO Algorithm for Anomaly Intrusion Detection," Journal of Software, vol. 6, no. 12, pp. 2350-2360, 2011. https://doi.org/ 10.4304/jsw.6.12.2350-2360
Copyright & License
Copyright © 2011 by the authors. This is an open access article distributed under the Creative Commons Attribution License which permits unrestricted use, distribution, and reproduction in any medium, provided the original work is properly cited (CC BY 4.0).