AMG Model Based on HGA and Data Mining
Qiguang Wang · Jisuanji gongcheng · 2012
The paper proposes an Adaptive Model Generation(AMG) model based on Hybrid Genetic Algorithm(HGA) and data mining.An improved clustering algorithm is used to divide the normal/abnormal behavior library that is from network and system behavior records.HGA is used to dig out the invasion rules,the rules are put into the rule base,and detection is realized by hybrid detection module.Experimental results show that the AMG model can detect unknown intrusion with higher detection rate and lower false detection rate.