基于机器学习的入侵检测系统使用最小正方形支向量机器
Pratik Waghmode1, Manideep Kanumuri1, Hosam El-Ocla2
1Department of Computer Science, Lakehead University, Thunder Bay, ON, Canada.
Scientific reports
|April 8, 2025
概括
本研究介绍了一种机器学习入侵检测系统,使用量子启发的最小正方形支向量机 (LS-SVM) 和特征选择. 这种新的方法显著减少了错误的预测和训练时间,以提高网络安全性.
科学领域:
- 网络安全 网络安全
- 机器学习 机器学习
- 网络入侵检测 网络入侵检测
背景情况:
- 传统的入侵检测系统 (IDS) 难以应对大数据的规模和复杂性,导致不准确和错误的预测.
- 机器学习 (ML) 为IDS提供了更好的性能,但传统的基于ML的系统在可扩展性和高维度方面面临挑战,经常因无关紧要的功能而导致准确性下降.
- 尽量减少虚假阳性和提高基于机器学习的IDS的效率对于有效的实时网络保护至关重要.
研究的目的:
- 开发基于机器学习的网络入侵检测系统,以提高分类准确性并减少错误预测.
- 在大数据环境中解决传统基于ML的IDS的可扩展性和效率挑战.
- 引入一个使用量子启发的最小正方形支向量机 (LS-SVM) 具有详尽的特征选择的监督框架.
主要方法:
- 采用了详尽的特征选择算法,以确定最佳的特征子集,以获得最大的分类准确性.
- 在监督学习框架内使用量子启发的最小正方形支向量机 (LS-SVM) 分类器.
- 根据所选的特征调整模型超参数,以最大限度地提高预测性能并最大限度地减少训练时间.
主要成果:
- 实现了高检测准确度:NSL-KDD上99.3%,CIC-IDS-2017上99.5%,UNSW-NB15.3上93.3%,这些都是在NSL-KDD上实现的.
- 证明了出色的精度 (1.00对于CIC-IDS-2017和UNSW-NB15) 和回忆 (高达1.00对于CIC-IDS-2017).
- 与其他模型相比,展出的竞争性测试时间 (例如,CIC-IDS-2017的1.0s) 和最小的培训时间,表明适合实时应用.
结论:
- 拟议的基于LS-SVM的入侵检测系统有效地提高了分类准确性,减少了错误预测,优于传统方法.
- 综合了详尽的功能选择和量子灵感的LS-SVM,为大数据网络安全提供了可扩展和高效的解决方案.
- 该模型的强大性能和效率使其成为实时入侵检测应用的有希望的候选人.
相关概念视频
Residuals and Least-Squares Property
7.2K
The vertical distance between the actual value of y and the estimated value of y. In other words, it measures the vertical distance between the actual data point and the predicted point on the line
If the observed data point lies above the line, the residual is positive, and the line underestimates the actual data value for y. If the observed data point lies below the line, the residual is negative, and the line overestimates the actual data value for y.
The process of fitting the best-fit...
If the observed data point lies above the line, the residual is positive, and the line underestimates the actual data value for y. If the observed data point lies below the line, the residual is negative, and the line overestimates the actual data value for y.
The process of fitting the best-fit...
7.2K
Classification of Systems-I
161
Linearity is a system property characterized by a direct input-output relationship, combining homogeneity and additivity.
Homogeneity dictates that if an input x(t) is multiplied by a constant c, the output y(t) is multiplied by the same constant. Mathematically, this is expressed as:
Homogeneity dictates that if an input x(t) is multiplied by a constant c, the output y(t) is multiplied by the same constant. Mathematically, this is expressed as:
161
Classification of Systems-II
127
Continuous-time systems have continuous input and output signals, with time measured continuously. These systems are generally defined by differential or algebraic equations. For instance, in an RC circuit, the relationship between input and output voltage is expressed through a differential equation derived from Ohm's law and the capacitor relation,
127
Classification of Signals
348
In signal processing, signals are classified based on various characteristics: continuous-time versus discrete-time, periodic versus aperiodic, analog versus digital, and causal versus noncausal. Each category highlights distinct properties crucial for understanding and manipulating signals.
A continuous-time signal holds a value at every instant in time, representing information seamlessly. In contrast, a discrete-time signal holds values only at specific moments, often denoted as x(n), where...
A continuous-time signal holds a value at every instant in time, representing information seamlessly. In contrast, a discrete-time signal holds values only at specific moments, often denoted as x(n), where...
348
Difference from Background: Limit of Detection
5.0K
The limit of detection (LOD) is the smallest amount of analyte that can be distinguished from the background noise. The LOD value corresponds to the concentration at which the analyte signal is three times larger than the standard deviation of the blank signal. Below this value, the analyte signal cannot be differentiated from the background noise. It is calculated by dividing the calibration slope by 3 times the standard deviation of the blank signals.
The LOD indicates the presence or absence...
The LOD indicates the presence or absence...
5.0K
Calibration Curves: Linear Least Squares
1.2K
A calibration curve is a plot of the instrument's response against a series of known concentrations of a substance. This curve is used to set the instrument response levels, using the substance and its concentrations as standards. Alternatively, or additionally, an equation is fitted to the calibration curve plot and subsequently used to calculate the unknown concentrations of other samples reliably.
For data that follow a straight line, the standard method for fitting is the linear...
For data that follow a straight line, the standard method for fitting is the linear...
1.2K


