A real-time hybrid intrusion detection system based on Principle Component Analysis and Self Organizing Maps

Abstract

Hybrid intrusion detection is a novel kind of model combining the advantages of anomaly detection and misuse detection. We design a new hybrid intrusion system based on Principle Component Analysis and Self Organizing Maps, aiming at establishing an extensible real-time intrusion model with high detection accuracy. Experimental results on the KDD 1999 Cup dataset show that the proposed model is promising in terms of detection accuracy and computational efficiency, thus amenable for real-time intrusion detection.