Intrusion detection method of cosine time-variant PSO-SVM

Abstract

The invention discloses an intrusion detection method of a cosine time-variant PSO-SVW, and belongs to the technical field of the network information security. The method comprises the following steps: performing numeralization processing on all data in a NSL-KDD data set and an ADFA intrusion detection data set in a normal sample and an attack sample, and then performing cosine time-variant PSO optimization, and performing a misuse detection by applying the cosine time-variant PSO-SVM. Compared with the existing partial time-variant plasma swarm optimized SVW model, the learning capacity of the time-variant plasma swarm algorithm in the detection process is improved according to the cosine function nonlinearity, the cosine time-variant acceleration coefficient expression way is simplified, and a value policy of the inertia weight is improved, and the elaborate degree and the searching efficiency of the current optimal target region searching are improved, thereby accelerating the convergence speed of the time-variant PSO-SVW intrusion detection model, and effectively improving the detection rate of the time-variant PSO-SVW intrusion detection model.

Description

technical field [0001] The invention relates to an intrusion detection method of cosine time-varying PSO-SVM, belonging to the technical field of network information security. Background technique [0002] Today, computer systems exist in almost every aspect of human life. However, the existing Internet is plagued by network security and data privacy issues, which will also become a major challenge and obstacle for the Industrial Internet of Things. Intrusion Detection System (IDS) monitors the behavior of the network environment and determines intrusion and legitimate activities. In particular, SCADA systems are used in key infrastructure facilities such as chemical plants, power transmission and distribution systems, water distribution networks, and sewage treatment facilities. The amount of data in the network environment has increased significantly, and the content is vulnerable to various attacks. Deploying an intrusion detection system in the above system is an import...

AI Technical Summary

Problems solved by technology

The advantage of this method is that it can detect new unknown attacks, but the disadvantage is that the false alarm rate is high, and further research on detection features and algorithm design is needed

Although the intrusion detection model based on PSO-SVM is already a classic model in intrusion detection and has been widely used, the inertia weight and acceleration coefficient of the time-varying PSO algorithm can only be constant or The linear time-varying speed is used to search, which may cause the particles to lose balance in the local and global optimization directions, causing the PSO algorithm to fall into a local optimal situation or slow search ability

Images