基于SVM-RFE的异常入侵检测主机特征选择研究

异常入侵检测需要提取入侵特征的原始信息,因此特征选择非常重要.本文介绍了26个异常入侵Windows主机特征,以及SVM-RFE特征选择方法,并把SVM-RFE应用于SVM框架下的异常入侵检测系统主机特征选择.通过特征选择实验,得到了26个主机特征的重要性排序,并选出了18个主要特征.

Research of host-feature selection in anomaly detection based on SVM-RFE

Anomaly Detection needs to extract the original information of intrusion feature,so feature selection is extremely important.This paper presents 26 host-features of Windows as well as the feature selecting methods of SVM-RFE.It applies SVM-RFE to select feature in anomaly intrusion detection system base on SVM.Through the feature selection experiment,we obtained the important sequence of 26 host-features and selected 18 main features.