Abstract:Attacks on network systems are becoming more and more common, the current state of increasingly sophisticated attack methods, the emergence of intrusion prevention technology is the inevitable result of the development of computer technology and network technology, and research on intrusion prevention has become a new focus of network security technology research in recent years. In order to ensure the security of computer network confidential information, the authors propose a semisupervised clustering intrusion detection algorithm. An overview of machine learning, followed by an explanation of the theory of cluster analysis, simulation experiments were carried out using the K -means algorithm and the semisupervised clustering algorithm proposed by the author, for 10,000 records, the K -means clustering algorithm and the semisupervised clustering algorithm described in this paper are used, respectively, and intrusion detection data tests were performed. At the same time, different K values were selected, three datasets were selected from "kddcup.newtestdata_10_percent_corrected," the test data were tested separately, and their average value was taken as the test result. From the simulation results, the detection rate of the semisupervised clustering algorithm is higher than that of the K -means clustering algorithm, and the false alarm rate and K -means algorithms have also been improved. Therefore, the author's semisupervised algorithm enhances the stability of the system, and the performance of the K -means algorithm is improved to a certain extent. When the value of K gradually increases, the false alarm rate also increases; however, when K is 20, the detection rate is maximized, from this, it can be known that when K is 20, its detection rate reaches 91.76%, and the false alarm rate is 8.54%. The detection rate of the author's algorithm is significantly higher than the other two algorithms, the false positive rate is slightly higher than K -means, and the false positive rate is lower than that of the other algorithm, proving the superior performance of our algorithm.

A Log Analysis Audit Model Based on Optimized Clustering Algorithm

Using Visualization to Improve Clustering Analysis on Heterogeneous Information Network.

Study on a New Clustering Optimization Algorithm and Its Application in Network Faults Analysis

Computer Network Confidential Information Security Based on Big Data Clustering Algorithm

The importance of the clustering model to detect new types of intrusion in data traffic

ClusterLog: Clustering Logs for Effective Log-based Anomaly Detection

Algorithms and methods of data clustering in the analysis of information security event logs

K-Means Clustering Analysis Based On Adaptive Weights For Malicious Code Detection

An Industrial Network Intrusion Detection Algorithm Based on Multifeature Data Clustering Optimization Model

A Security Log Analysis Scheme Using Deep Learning Algorithm for IDSs in Social Network

A Novel Model for Anomaly Detection in Network Traffic Based on Support Vector Machine and Clustering

Log Analysis Techniques using Clustering in Network Forensics

CLUSTERING-BASED NETWORK INTRUSION DETECTION

User Abnormal Behavior Analysis Based on Neural Network Clustering

Log Analysis For Network Attack Detection Using Deep Learning Models

An Improved Kernel Clustering Algorithm Used in Computer Network Intrusion Detection.

Mining Network Traffic with the k -Means Clustering Algorithm for Stepping-Stone Intrusion Detection

Analyzing Intrusion Alerts Based on Kernel Neural-Gas Clustering

System log clustering approaches for cyber security applications: A survey

Detecting and Identifying Insider Threats Based on Advanced Clustering Methods

A Model of Trojan Communication Behavior Detection Based on Hierarchical Clustering Technique