Unlock instant, AI-driven research and patent intelligence for your innovation.

Intrusion detection method and device based on weighted distance measure and matrix decomposition

A matrix decomposition and distance measurement technology, which is applied in the field of information security, can solve the problems of noise data sensitivity, no consideration of data set characteristics, data set attribute dimension difference, poor detection effect, etc., to achieve weakening influence, strong usability and The effect of practicality and excellent performance

Active Publication Date: 2018-03-20
南方电网互联网服务有限公司
View PDF2 Cites 0 Cited by
  • Summary
  • Abstract
  • Description
  • Claims
  • Application Information

AI Technical Summary

Problems solved by technology

[0004] In view of this, the embodiment of the present invention provides an intrusion detection method and device based on weighted distance measurement and matrix decomposition to solve the problem that the existing technology does not consider the characteristics of the entire data set and the dimensional differences between the attributes of each data set. Sensitive data, leading to poor detection results

Method used

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
View more

Image

Smart Image Click on the blue labels to locate them in the text.
Viewing Examples
Smart Image
  • Intrusion detection method and device based on weighted distance measure and matrix decomposition
  • Intrusion detection method and device based on weighted distance measure and matrix decomposition
  • Intrusion detection method and device based on weighted distance measure and matrix decomposition

Examples

Experimental program
Comparison scheme
Effect test

Embodiment 1

[0022] figure 1 It shows the implementation process of the intrusion detection method based on weighted distance measure and matrix decomposition provided by Embodiment 1 of the present invention, and the process of the method is described in detail as follows:

[0023] In step S101, the original data set is preprocessed to obtain a high-dimensional vector group.

[0024] In the embodiment of the present invention, the original data set contains a plurality of data records, and each data record may contain continuous data points and / or non-numeric data points, and data normalization preprocessing needs to be performed on the two, specifically, yes:

[0025] For the continuous data points in the original data set, map its data value from [min, max] to [0, 1] interval;

[0026] For the non-numerical data points in the original data set, after discretization, they are mapped to numerical values ​​by encoding, or directly compared in the distance measure, and the distance is cal...

Embodiment 2

[0053] figure 2 The structure of the intrusion detection device based on the weighted distance measure and matrix decomposition provided by the second embodiment of the present invention is shown. For the convenience of description, only the parts related to the embodiment of the present invention are shown.

[0054] The intrusion detection device based on weighted distance measurement and matrix decomposition can be a software unit, a hardware unit, or a combination of software and hardware running in each terminal device (such as a mobile phone, a tablet computer, etc.), or it can be integrated into the The terminal device runs in or runs in an application system of the terminal device.

[0055] The intrusion detection device based on weighted distance measure and matrix decomposition includes:

[0056] A preprocessing unit 21, configured to preprocess the original data set to obtain a high-dimensional vector group;

[0057] A dimensionality reduction unit 22, configured ...

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to View More

PUM

No PUM Login to View More

Abstract

The present invention is applicable to the technical field of information security, and provides an intrusion detection method and device based on weighted distance measurement and matrix decomposition. The method includes: preprocessing the original data set to obtain a high-dimensional vector group; The matrix decomposition algorithm of the obtained high-dimensional vector group is subjected to dimensionality reduction processing to obtain a low-dimensional vector group; the obtained low-dimensional vector group is subjected to a weighted Minkowski distance metric; based on the weighted Minkowski distance metric and a predetermined clustering algorithm to detect the preprocessed data set to obtain a detection result. The present invention can effectively solve the problem that the existing technology does not consider the characteristics of the entire data set and the dimension difference among the attributes of each data set, and is sensitive to noise data, resulting in poor detection effect.

Description

technical field [0001] The invention belongs to the technical field of information security, in particular to an intrusion detection method and device based on weighted distance measurement and matrix decomposition. Background technique [0002] The research and development of Intrusion Detection (ID) has a history of more than 20 years. Scholars at home and abroad have proposed a large number of intrusion detection methods, such as statistical methods, Bayesian reasoning methods, machine learning methods, neural networks, data mining, Genetic algorithm, support vector machine and other methods. However, the above-mentioned methods all have a disadvantage, that is, the training data for establishing the detection model is relatively high: it must be "clean" data and must contain most of the normal behavior of the detection object, and it is very difficult to do both at the same time. Therefore, in recent years, researchers have used clustering methods for intrusion detectio...

Claims

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to View More

Application Information

Patent Timeline
no application Login to View More
Patent Type & Authority Patents(China)
IPC IPC(8): G06F21/55
CPCG06F21/55G06F18/23213
Inventor 张爽张涌宁立
Owner 南方电网互联网服务有限公司