Two-phase Intrusion Detection Algorithm in Mixed Attributes Data Stream
Xiaoke Su, Lan Yang, Qin Yuming, Wan Renxia, Cheng Yao-dong · Jisuanji gongcheng · 2010
This paper proposes a two-phase intrusion detection algorithm in mixed attributes data stream——KDDCUP99-10% network intrusion data set.The algorithm gains the statistical information in data stream by the incremental clustering.Weighted fuzzy clustering is done based on the statistical information according to proposed weighted fuzzy cluster feature.The number of clusters for fuzzy clustering can change dynamically.Theoretical analysis and experimental results show the algorithm can detect the intrusion behaviors effectively.