Two-level feature selection method based on SVM for intrusion detection

被引:1
作者
Wu, Xiao-Nian [1 ,2 ,3 ]
Peng, Xiao-Jin [1 ]
Yang, Yu-Yang [1 ]
Fang, Kun [1 ]
机构
[1] School of Communication and Information, Guilin University of Electronic Technology, Guilin
[2] Guangxi Wireless Broadband Communication and Signal Processing Key Laboratory, Guilin University of Electronic Technology, Guilin
[3] Guangxi Experiment Center of Information Science, Guilin University of Electronic Technology, Guilin
来源
Tongxin Xuebao/Journal on Communications | 2015年 / 36卷 / 04期
关键词
Feature selection; Fisher score; Intrusion detection; Sequential backward selection; Support vector machine;
D O I
10.11959/j.issn.1000-436x.2015127
中图分类号
学科分类号
摘要
To select optimized features for intrusion detection, a two-level feature selection method based on support vector machine was proposed. This method set an evaluation index named feature evaluation value for feature selection, which was the ratio of the detection rate and false alarm rate. Firstly, this method filtrated noise and irrelevant features to reduce the feature dimension respectively by Fisher score and information gain in the filtration mode. Then, a crossing feature subset was obtained based on the above two filtered feature sets. And combining support vector machine, the sequential backward selection algorithm in the wrapper mode was used to select the optimal feature subset from the crossing feature subset. The simulation test results show that, the better classification performance is obtained according to the selected optimal feature subset, and the modeling time and testing time of the system are reduced effectively. ©, 2015, Editorial Board of Journal on Communications. All right reserved.
引用
收藏
页数:8
相关论文
共 16 条
[1]  
Zhang Y., Yang A., Xiong C., Et al., Feature selection using data envelopment analysis, Knowledge-Based Systems, 64, pp. 70-80, (2014)
[2]  
Lee M.C., Using support vector machine with a hybrid feature selection method to the stock trend prediction, Expert Systems with Applications, 36, 8, pp. 10896-10904, (2009)
[3]  
Yongli Z., Yung Z., Wei M.T., Et al., An improved feature selection algorithm based on MAHALANOBIS distance for network intrusion detection, Sensor Network Security Technology and Privacy Communication System (SNS & PCS), 2013 International Conference on, pp. 69-73, (2013)
[4]  
Tesfahun A., Bhaskari D.L., Intrusion detection using random forests classifier with SMOTE and feature reduction, Cloud & Ubiquitous Computing & Emerging Technologies (CUBE), 2013 International Conference on, pp. 127-132, (2013)
[5]  
Araujo N.V.S., Oliveira R., Ferreira E.W.T., Et al., Kappa-fuzzy aRTMAP: A feature selection based methodology to intrusion detection in computer networks, Trust, Security and Privacy in Computing and Communications (TrustCom), 2013 12th IEEE International Conference on, pp. 271-276, (2013)
[6]  
Zhang F., Wang D., An effective feature selection approach for network intrusion detection, Networking, Architecture and Storage (NAS), 2013 IEEE Eighth International Conference on, pp. 307-311, (2013)
[7]  
Hsu H.H., Hsieh C.W., Lu M.D., Hybrid feature selection by combining filters and wrappers, Expert Systems with Applications, 38, 7, pp. 8144-8150, (2011)
[8]  
Xie J., Wang C., Using support vector machines with a novel hybrid feature selection method for diagnosis of erythemato-squamous diseases, Expert Systems with Applications, 38, 5, pp. 5809-5815, (2011)
[9]  
Wang T.H., Tian S.F., Huang H.K., Feature weighted support vector machine, Journal of Electronics & Information Technology, 31, 3, pp. 514-518, (2009)
[10]  
Cortes, Vapnik V., Support vector networks, Machine Learning, 20, pp. 273-297, (1995)