An Improved K-Means Using in Anomaly Detection

被引:6
|
作者
Yin, Chunyong [1 ]
Zhang, Sun [1 ]
Wang, Jin [2 ]
Kim, Jeong-Uk [3 ]
机构
[1] Nanjing Univ Informat Sci & Technol, Jiangsu Key Lab Meteorol Observat & Informat Proc, Jiangsu Engn Ctr Network Monitoring, Sch Comp & Software, Nanjing, Jiangsu, Peoples R China
[2] Nanjing Univ Informat Sci & Technol, Sch Comp & Software, Nanjing, Jiangsu, Peoples R China
[3] Sangmyung Univ, Dept Energy Grid, Seoul, South Korea
基金
中国国家自然科学基金;
关键词
anomaly detection; cluster analysis; K-means; information entropy; DD algorithm;
D O I
10.1109/CCITSA.2015.11
中图分类号
TP18 [人工智能理论];
学科分类号
081104 ; 0812 ; 0835 ; 1405 ;
摘要
Anomaly detection, as a part of network security, is an important question, which has attracted much attention. The characteristics of data mining make it suitable for anomaly detection. Cluster analysis is a kind of data mining technology and it can divide records into different clusters, which is convenient for anomaly detection. Traditional K-manes is affected by the selection of initial centers, the number of clusters and isolated points. We combine information entropy and DD algorithm to improve K-means and use KDD CUP99 data set to analysis the performance. From twice experiences, we find that improved K-means has higher detection rate and lower false positive rate than traditional K-means.
引用
收藏
页码:129 / 131
页数:3
相关论文
共 50 条
  • [1] Anomaly Detection by Using Streaming K-Means and Batch K-Means
    Wang, Zhuo
    Zhou, Yanghui
    Li, Gangmin
    2020 5TH IEEE INTERNATIONAL CONFERENCE ON BIG DATA ANALYTICS (IEEE ICBDA 2020), 2020, : 11 - 17
  • [2] An Anomaly Intrusion Detection Method Based on Improved K-means of Cloud
    Zhao, Xinlong
    Zhang, Weishi
    PROCEEDINGS OF 2016 SIXTH INTERNATIONAL CONFERENCE ON INSTRUMENTATION & MEASUREMENT, COMPUTER, COMMUNICATION AND CONTROL (IMCCC 2016), 2016, : 284 - 288
  • [3] Improved K-means algorithm for manufacturing process anomaly detection and recognition
    Zhou Xiaomin
    Peng Wei
    Shi Haibo
    1st International Symposium on Digital Manufacture, Vols 1-3, 2006, : 1036 - 1041
  • [4] Improved K-means Algorithm for Manufacturing Process Anomaly Detection and Recognition
    ZHOU Xiaomin PENG Wei SHI Haibo Shenyang Institution of Automation Chinese Academy of SciencesShenyang China Graduate SchoolChinese Academy of SciencesBeijing China
    武汉理工大学学报, 2006, (S3) : 1036 - 1041
  • [5] Improved K-means algorithm for manufacturing process anomaly detection and recognition
    Zhou, Xiaomin
    Peng, Wei
    Shi, Haibo
    Wuhan Ligong Daxue Xuebao/Journal of Wuhan University of Technology, 2006, 28 (SUPPL. 1): : 1036 - 1041
  • [6] A hybrid approach for anomaly detection using K-means and PSO
    Wang, Ke-Wei
    Qin, Su-Juan
    PROCEEDINGS OF THE 2ND INTERNATIONAL CONFERENCE ON ELECTRONICS, NETWORK AND COMPUTER ENGINEERING (ICENCE 2016), 2016, 67 : 821 - 826
  • [7] Parallel implementing improved k-means applied for image retrieval and anomaly detection
    Yin, Chunyong
    Zhang, Sun
    MULTIMEDIA TOOLS AND APPLICATIONS, 2017, 76 (16) : 16911 - 16927
  • [8] Parallel implementing improved k-means applied for image retrieval and anomaly detection
    Chunyong Yin
    Sun Zhang
    Multimedia Tools and Applications, 2017, 76 : 16911 - 16927
  • [9] Unsupervised anomaly detection using an evolutionary extension of k-means algorithm
    Lu, Wei
    Traoreá, Issa
    International Journal of Information and Computer Security, 2008, 2 (02) : 107 - 139
  • [10] Optimizing Fuzzy K-means for network anomaly detection using PSO
    Ensafi, Roya
    Dehghanzadeh, Soheila
    Akbarzadeh, Mohammad -R
    2008 IEEE/ACS INTERNATIONAL CONFERENCE ON COMPUTER SYSTEMS AND APPLICATIONS, VOLS 1-3, 2008, : 686 - +