文献类型：会议论文

英文题名：A Novel Adaptive Intrusion Detection Approach Based on Comparison of Neural Networks and Idiotypic Networks

作者：Zhao, Linhui[1];Fang, Xin[1];Dai, Yaping[2]

第一作者：赵林惠

通讯作者：Zhao, LH[1]

机构：[1]Beijing Union Univ, Sch Mechatron, Beijing, Peoples R China;[2]Beijing Inst Technol, Sch Comp & Control, Beijing, Peoples R China

第一机构：北京联合大学机器人学院

通讯机构：[1]corresponding author), Beijing Union Univ, Sch Mechatron, Beijing, Peoples R China.|[1141739]北京联合大学机器人学院;[11417]北京联合大学;

会议论文集：2nd International Workshop on Nonlinear Dynamics and Synchronization (INDS'09)

会议日期：JUL 20-21, 2009

会议地点：Klagenfurt, AUSTRIA

语种：英文

外文关键词：pattern recognition; neural networks; idiotypic networks; intrusion detection

摘要：Although neural networks and idiotypic networks are similar in functions, they are different in many aspects. This paper compares them In topological structures, initializing ways, learning methods, et al. Based on lite comparison and combined with pattern recognition technology, this paper proposes a novel adaptive intrusion detection approach using idiotypic networks. Additionally, the approach is compared with detection approach using neural networks. Idiotypic networks' memory and learning abilities, especially their dynamic adjustable ability enable them superior to neural networks in lite application for intrusion detection. This paper presents a new detection algorithm according to immune response principles and a new multi-mutation pattern idiotypic network model to Implement the detection algorithm. By utilizing some immune principles, the proposed approach can overcome problems existing in detection approaches based on neural networks. Firstly, idiotypic networks can adjust automatically with presenting of antigens, making new features fused into networks continuously. Thus, this approach needs not to be updated periodically. Secondly, the trained network model can still be changed to learn new features of attacks, so the performance of detecting unknown attacks is improved. Thirdly, clone expansion of antibodies is suppressed by idiotypic effects, thus false positive rate is decreased. Experiments are carried out on Fisher Iris dataset and KDD-CUP-99 database to verify the performance of this adaptive detection approach. Compared with the detection approach based on a multilayer perception network, the false positive rate is decreased and the detection accuracy of unknown attacks is increased.