计算机科学
Boosting(机器学习)
机器学习
人工智能
入侵检测系统
渐进式学习
集成学习
基于群体的增量学习
阿达布思
数据挖掘
稳健性(进化)
分类器(UML)
遗传算法
生物化学
化学
基因
作者
Mahendra Data,Masayoshi Aritsugi
标识
DOI:10.1145/3556223.3556252
摘要
Incremental learning is a promising algorithm for creating an adaptive network intrusion detection system (IDS) model. In contrast with batch learning models, incremental learning models can be retrained easily when new network intrusion data emerge. Moreover, some incremental learning models, such as the Hoeffding Tree model, can be retrained only using latest training data. This advantage is appealing because computer networks produce enormous amounts of data every day. Using incremental learning models for detecting the ever-growing network intrusions can save computational resources while preserving the performance of the models. However, network data suffer from the imbalanced data problem where the data distribution of the classes in the training data is often severely disproportional. This imbalanced data problem is affecting the performance of incremental learning algorithms. To mitigate this problem, we propose an incremental learning algorithm for network IDSs that can learn from imbalanced data. Our proposed method is an ensemble incremental learning algorithm composed of the Hoeffding Tree, incremental Adaptive Boosting (AdaBoost), and Hard Sampling algorithms. The experimental results show that our proposed model has superior performance compared to the other incremental learning models tested in this study. Moreover, our proposed method increases the robustness of the incremental learning model against the imbalanced data problem.
科研通智能强力驱动
Strongly Powered by AbleSci AI