期刊論文
學年 | 112 |
---|---|
學期 | 2 |
出版(發表)日期 | 2024-04-11 |
作品名稱 | Enhancing network intrusion detection by lifelong active online learning |
作品名稱(其他語言) | |
著者 | Chuang, Po-jen; Huang, Pang‑yu |
單位 | |
出版者 | |
著錄名稱、卷期、頁數 | The Journal of Supercomputing |
摘要 | Machine learning has been widely used to build intrusion detection models in detecting unknown attack traffic. How to train a model properly in order to attain the desired intrusion detection is an important topic. In contrast to offline learning, online learning proves more practical as it can update models simultaneously in the detecting process to comply with real network traffic. Active learning is an effective way to realize online learning. Among existing active learning mechanisms proposed to perform intrusion detection, most fail to meet the real online environment or to run persistently. This paper presents a new active online learning mechanism to secure better intrusion detection performance. The new mechanism advances related works in bringing the lifelong learning practice to fit in the online environment. It uses the efficient random forest (RF) as the detection model to train samples and adds a new tree to train a new batch of data when updating the model at each online stage, to pursue lifelong learning. By training a new batch of data only, it can keep the previously trained weights from being updated so as to preserve the past knowledge. Our mechanism is experimentally proved to yield better overall results than existing mechanisms: It produces superior training efficiency and detection performance—with the least training time, best training data quality and much reduced training data quantity. |
關鍵字 | Network intrusion detection;Machine learning;Active learning;Lifelong learning;Online learning;Performance evaluation |
語言 | en |
ISSN | 1573-0484 |
期刊性質 | 國外 |
收錄於 | SCI |
產學合作 | |
通訊作者 | |
審稿制度 | 是 |
國別 | USA |
公開徵稿 | |
出版型式 | ,電子版 |
相關連結 |
機構典藏連結 ( http://tkuir.lib.tku.edu.tw:8080/dspace/handle/987654321/125722 ) |