Abstract:Network Anomaly Detection is a critical task to ensure network security. With increasing network traffic, detecting network anomaly would require solving a large-scale pattern classification problem that often contains millions of training vectors. Each training vector may represent a particular signature of network traffic pattern and some of them may be linked to security breaching activities that need to be detected and eradicated. In this paper, a popular statistical learning algorithm known as the Support Vector Machine (SVM) was consider to solve the network anomaly detection problem. However, it is well known that SVM would require excessively long computing time and exceedingly large amount of memory when number of training vectors becomes huge. Hence, direct application of the standard SVM algorithm to solve large-scale network anomaly detection problems is impractical. In this paper, based on computational geometry theory, a new algorithm called convex-hull SVM (CH-SVM) was proposed, which can yield the same solution as original SVM while using significantly less training data, and hence less computing time. Then experiments were done on KDD'99 intrusion detection dataset to compare the performance of the proposed algorithm to a standard SVM and observed reduced training time and improved classification accuracy.

Fast Intrusion Detection Algorithm Based on Reduced SVM

A GPU-RSVM based intrusion detection classifier

LS-SVM Based Intrusion Detection Using Kernel Space Approximation and Kernel-Target Alignment

Intrusion Detection Based on Improved SVM Algorithm

An Improved SVM Algorithm in Intrusion Detection Application

Intrusion Detection Based on Improved SVM Active Learning

GPU Implementation of Parallel Support Vector Machine Algorithm with Applications to Detection Intruder.

Real-time intrusion detection system based on one-class SVM

An Intrusion Detection Method Based on Rough Set and Svm Algorithm

Intrusion detection method based on KFDA-SVM

Ch-Svm Based Network Anomaly Detection

Intrusion Detection System Based on Feature Selection and Support Vector Machine

An adaptive network intrusion detection method based on PCA and support vector machines

Intrusion Detection Method Based on Support Vector Machine with Pre-Extracting Support Vector

A Rough Set and SVM Based Intrusion Detection Classifier

On The Efficiency Of Support Vector Classifiers For Intrusion Detection

Kernel Pca Based Network Intrusion Feature Extraction and Detection Using Svm

Research on Intrusion Detection of Industrial Control System Based on FastICA-SVM Method.

Detect Intrusion Using Rough Set and Support Vector Machine

A Novel Parallel Reduced Support Vector Machine

A Novel SVM by Combining Kernel Principal Component Analysis and Improved Chaotic Particle Swarm Optimization for Intrusion Detection