1st International ICST Conference on Communications and Networking in China

Research Article

Intrusion Detection System Based on Feature Selection and Support Vector Machine

  • @INPROCEEDINGS{10.1109/CHINACOM.2006.344739,
        author={ZHANG Xue-qin and GU Chun-hua  and LIN Jia-jun},
        title={Intrusion Detection System Based on Feature Selection and Support Vector Machine},
        proceedings={1st International ICST Conference on Communications and Networking in China},
        publisher={IEEE},
        proceedings_a={CHINACOM},
        year={2007},
        month={4},
        keywords={},
        doi={10.1109/CHINACOM.2006.344739}
    }
    
  • ZHANG Xue-qin
    GU Chun-hua
    LIN Jia-jun
    Year: 2007
    Intrusion Detection System Based on Feature Selection and Support Vector Machine
    CHINACOM
    IEEE
    DOI: 10.1109/CHINACOM.2006.344739
ZHANG Xue-qin1, GU Chun-hua 1, LIN Jia-jun1
  • 1: East China University of science and technology

Abstract

Support vector machine (SVM) has been applied to intrusion detection system (IDS) for its abilities to perform classification and regression. But for large-scale network intrusion detection problem, since solving a support vector machine is a typical quadratic optimization problem, which is influenced by the dimension and quantity of examples, many problems arise. KDDCUP'99 was used as the experiment dataset in this paper. A feature selection technology based on Fisher score was presented and used to construct a reduced feature subset of KDDCUP'99 dataset. SVM was used as a classifier. Experiment was run. The experiment results show, using Fisher score combined with SVM to select the important features is an effective method to reduce the dimension of the example feature space, and the classification accuracy has not dramatically decreased comparing to the original feature space.