下載電子全文宣告This thesis is authorized to indicate in-campus access at one year and off-campus not accessible
You can not download at the moment.
Your IP address is 184.108.40.206
The defense date of the thesis is 2009-08-26
The current date is 2019-07-18
This thesis will be accessible at off-campus not accessible
URN etd-0824109-174514 Statistics This thesis had been viewed 2414 times. Download 13 times. Author Yi-Chen Pan Author's Email Address No Public. Department Computer Science and Enginerring Year 2008 Semester 2 Degree Master Type of Document Master's Thesis Language zh-TW.Big5 Chinese Page Count 58 Title A Study on the Combination of K-means and Differential Evolution for Intrusion Detection Keyword differential evolution K-means intrusion detections intrusion detections K-means differential evolution Abstract A network based intrusion detection system that examines the network packet to find possible intrusion events is gaining its popularity in recent years. This mechanism can keep the system hiding from being discovered by the intruder. When incorporate with other network devices such as the router or layer 2 switches, it is possible to establish a real time intrusion protection system to protect the user devices or servers. However, one of the most serious problems of this mechanism is its low detection rate which may generate a huge amount of warning messages. The event report will let the administrator hard to handle and may make the system useless when the administrator completely ignore the warning messages. In this study, we propose a clustering algorithm to improve the detection rate of the network based intrusion detection system. We first use K-means algorithm to find the near optimal cluster center and then use the differential evolution algorithm to find the optimal center and the most appropriate number of clusters. In the detection phase, we use the distance between the input sample and the cluster center to classify the sample to the closest cluster and determine whether it is normal or not. The KDD CUP 99 data set is used to evaluate the detection performance. The experimental results reveal that the proposed algorithm can provide better detection rate then the K-means algorithm alone while reduce the time complexity of using the differential evolution alone. Advisor Committee Prof. Tsang-Long Pao - advisor
Files Date of Defense 2009-07-31 Date of Submission 2009-08-26