Integrated Rule Mining Based on Fuzzy GNP and Probabilistic Classification for Intrusion Detection
Nannan Lu, Shingo Mabu, Kotaro Hirasawa · Journal of Advanced Computational Intelligence and Intelligent Informatics · 2011
With the increasing popularity of the Internet, network security has become a serious problem recently. How to detect intrusions effectively becomes an important component in network security. Therefore, a variety of algorithms have been devoted to this challenge. Genetic network programming is a newly developed evolutionary algorithm with directed graph gene structures, and it has been applied to data mining for intrusion detection systems providing good performances in intrusion detection. In this paper, an integrated rule mining algorithm based on fuzzy GNP and probabilistic classification is proposed. The integrated rule mining uses fuzzy class association rule mining algorithm to extract rules with different classes. Actually, it can deal with both discrete and continuous attributes in network connection data. Then, the classification is done probabilistically using different class rules. The integrated method showed excellent results by simulation experiments.