A Novel Method for Network Intrusion Detection

Abstract

Intrusion detection is one of the key research directions of network information security. In order to make up for the deficiencies of traditional security technologies such as firewall, encryption, and authentication, by analyzing the characteristics of network attacks and existing intrusion detection models, the advantages of triadic concept analysis and the application of fuzzy set theory in network intrusion detection are analyzed. The intrusion detection model FCTA based on triadic concept analysis is proposed, which promotes the further development of network intrusion detection. First, we analyze the characteristics of the data and use TF-IDF and Z-Score to normalize and standardize the data to construct a fuzzy triadic background containing quadratic characteristics. It is used to describe the triadic relationship between network connections, network connection characteristics, and intrusion types of network packets. Then, the (i)-induced operator is used to construct the fuzzy triadic concept set based on the fuzzy triadic background and transformed into a fuzzy attribute triadic concept set. Then, the new samples are classified by calculating the similarity between the new samples and the elements in the fuzzy attribute triadic concept set by using the Euclidean distance formula. In order to reduce the model space complexity, compression storage technology is adopted in the model building process.. Finally, by using the IDS-2018 dataset, the rationality and effectiveness of the FCTA model are demonstrated. The average accuracy and average intrusion detection rate of FCTA classification are much higher than BP neural network, SVM algorithm, and KNN algorithm, and the FCTA misjudgment rate is much lower than the BP neural network algorithm, the KNN algorithm, and the SVM algorithm; with the increase of data volume, the accuracy rate and intrusion detection rate increase significantly.