Novel particle swarm optimization with mutation for intrusion detection

Guihua Sun,Yufang Zhang,Zhongyang Xiong
2007-01-01
Journal of Computational Information Systems
Abstract:This paper presents a novel system to apply particle swarm optimization with mutation (MPSO) for intrusion detection (MPSO-IDS). By applying mutation operator to the PSO algorithm near the end of run, the advanced MPSO algorithm can not only maintain the fast converging characteristics in the early phase. But it also avoids the premature convergence phenomenon in the later phase. The MPSO algorithm is employed to derive a set of constraint-based detectors from training data, and the support-confidence framework is utilized as fitness function to judge the quality of each detector. The generated detectors are then used to detect abnormal IP packets with any r intervals matching rule in the training data and testing data. Using the data sets of KDD CUP1999, the experiment results show that the proposed MPSO-IDS can avoid the premature convergence problem effectively, and achieve better detecting rate than PSO-IDS and SGA-IDS.
What problem does this paper attempt to address?