Feature Extraction Method for Network Intrusion Detection Based on RS-KPCA

Abstract

For the complexity and nonlinearity of the input characteristics in network intrusion detection system, a feature extraction method for network intrusion detection based on RS-KPCA is studied. Firstly, the Rough Set (RS) theory is used to select the valuable features, while the unnecessary features are removed. Then, the features of the intrusion detection sample data are extracted by the kernel principal component analysis (KPCA) algorithm. The number of new features is determined by the cumulative contribution rate. Simulation results show that this method can effectively remove the interference features, and has the advantages of obvious principal component feature and concentrated contribution rate, compared with PCA. Overall, the proposed method can effectively integrate the nonlinear features of the original data, reduce the dimension, and improve the intrusion detection performance.