A Bayesian network intrusion detection algorithm based on principal component analysis and sliding window

Abstract

In traditional Bayesian network (BN) intrusion detection, it is not taken into account that the dataset has an excessive number of attributes, which leads to an excessive calculation in the process of BN structure and thus greatly affects the detection efficiency. In addition, traditional BN intrusion does not consider attacks in the detection process; instead, it just simply relies on fixed BN to test the new dataset, which has a certain impact on detection accuracy. To solve these two problems, a new BN intrusion detection technology based on principal component analysis (PCA) and sliding window is introduced in this paper. The new algorithm reduces data dimensionality and uses the detected data to update the training dataset, which relatively completely reflects the overall status of the system. The experiments show that the improved algorithm can greatly reduce the computation cost and improve the detection accuracy.