Fuzzy Rough Clustering Methods for Network Intrusion Detection
Witcha Chimphlee · 2006
It is an important issue for the security of network to detect new intrusion attack and also to increase the detection rates and reduce false positive rates in Intrusion Detection System (IDS). The normal and the suspicious behavior in computer networks are hard to predict as the boundaries between them cannot be well defined. We apply the idea of the Fuzzy Rough C-means (FRCM) to clustering analysis. FRCM integrates the advantage of fuzzy set theory and rough set theory. The experimental results on dataset KDDCup99 show that our method outperforms the existing unsupervised intrusion detection methods