Research on intrusion detection method based on SMOTE and DBN-LSSVM

Abstract

Aiming at the problems of low accuracy and high false alarm rate when traditional machine learning algorithm processes massive and complex intrusion detection data, this paper proposes a network intrusion detection method (SMOTE-DBN-LSSVM) which combines deep belief network (DBN), synthetic minority oversampling technique (SMOTE) and least squares support vector machine (LSSVM). In this algorithm, intrusion detection data is input to the DBN for depth feature extraction, and then a small number of samples are added through SMOTE algorithm. Finally, LSSVM is used for classification. Through the effective evaluation of SMOTE-DBN-LSSVM model by NSL-KDD dataset, the experimental results show that SMOTE-DBN-LSSVM algorithm has the advantages of high accuracy and low false alarm rate compared with other algorithms, and improves the detection rate of small sample attacks.