SGER: Effective Network Anomaly Detection Based on Adaptive Machine Learning

SGER：基于自适应机器学习的有效网络异常检测

• 批准号: 0715342
• 负责人: Haesun Park
• 金额: $ 9万
• 依托单位: Georgia Tech Research Corporation
• 依托单位国家: 美国
• 项目类别: Standard Grant
• 财政年份: 2007
• 资助国家: 美国
• 起止时间: 2007-08-01 至 2009-07-31
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=0715342&HistoricalAwards=false
• 关键词: SGER; Effective; Network; Anomaly; Detection

Proposal #: CNS 07-15342PI(s): Park, Haesun Institution: Georgia Institute of Technology Alanta, GA 30332-0002Title: SGER: Effective Network Anomaly Detection based on Adaptive Machine LearningProject Proposed:This project, developing innovative adaptive machine learning algorithms for detecting network intrusions, especially anomaly detection, aims to increase the detection rate and speed of detection for dynamically changing data sets without recomputing the solutions from scratch. Instead, the existing solutions are utilized and updated with new data. By detecting more data in training without compromising data privacy, the algorithms are designed to increase the detection capability. The work addresses the following challenging aspects of machine learning based methods for network anomaly detection:. Development of Adaptive Machine Learning Algorithms,. Hierarchical Dimension Reduction and Clustering, and. Privacy Preserving Distributed Data Mining for Effective Utilization of Private Intrusion Detection Data Sets.The former, responding to the change of data over time, designs/creates efficient algorithms to delete the influence of old data and incorporate the new data, without recomputing the solution. The second, addressing the fact that typically data sets are intrinsically unbalanced when the problem is considered as a binary problem, generalizes further the cluster preserving dimension reduction methods to reflect the hierarchical cluster structure in dimension reduction. The latter, responding to data privacy, designs machine learning based anomaly detection algorithms by integrating locally generated results into one integrated solution without revealing the critical information in each local data set, thereby preserving privacy.Broader Impacts: The research produces methods that are likely to have great impact on a broad range of applications in very high-dimensional spaces. Their adaptability allows significant reduction in the computational complexity substantially improving the possibility of detailed study of data which has been prohibitively expensive. Involving an HBCU institution in the area, this female faculty PI leads an effort to engage more women and minority students.

提案编号：CNS 07-15342PI（s）：Park，Haesun 机构：佐治亚理工学院 Alanta，GA 30332-0002 标题：SGER：基于自适应机器学习的有效网络异常检测项目建议：该项目开发创新的自适应机器学习算法检测网络入侵，特别是异常检测，旨在提高对动态变化的数据集的检测率和检测速度，而无需重新计算解决方案 划痕。相反，现有的解决方案将被利用并用新数据进行更新。通过在训练中检测更多数据而不损害数据隐私，这些算法旨在提高检测能力。这项工作解决了基于机器学习的网络异常检测方法的以下具有挑战性的方面：自适应机器学习算法的开发。层次降维和聚类，以及。隐私保护分布式数据挖掘，有效利用私有入侵检测数据集。前者响应数据随时间的变化，设计/创建有效的算法来删除旧数据的影响并合并新数据，而无需重新计算解决方案。第二，解决了当问题被视为二元问题时数据集本质上不平衡的事实，进一步推广了簇保留降维方法以反映降维中的层次簇结构。后者响应数据隐私，通过将本地生成的结果集成到一个集成解决方案中，设计基于机器学习的异常检测算法，而不泄露每个本地数据集中的关键信息，从而保护隐私。 更广泛的影响：该研究产生的方法可能会对极高维空间中的广泛应用产生巨大影响。它们的适应性可以显着降低计算复杂性，从而大大提高对昂贵的数据进行详细研究的可能性。这位女教师 PI 与该地区的 HBCU 机构合作，领导了吸引更多女性和少数族裔学生的活动。