Network IDSs Based on the SVM Active Learning Algorithm

DUAN Dan-qing,CHEN Song-qiao,YANG Wei-ping
2006-01-01
Abstract:The Intrusion Detection System(IDS) has become an important part of network security.However, the traditional abnormal detection is heavily dependent on the large training samples to get high detection precision,but it is difficult to obtain sufficient training data in a real network environment. In order to solve the problem of excessive expense caused by obtaining the training samples,we use the SVM(Support Vector Machine)active learning algorithm in network intrusion detection. Compared with the traditional self-learning algorithm, our experiment shows that the active learning algorithm can immensely reduce the number of training samples and the training time,thus efficiently improving the performance of classification in IDSs.
What problem does this paper attempt to address?