An intrusion detection algorithm for sensor network based on normalized cut spectral clustering

PLoS One. 2019 Oct 4;14(10):e0221920. doi: 10.1371/journal.pone.0221920. eCollection 2019.

Abstract

Sensor network intrusion detection has attracted extensive attention. However, previous intrusion detection methods face the highly imbalanced attack class distribution problem, and they may not achieve a satisfactory performance. To solve this problem, we propose a new intrusion detection algorithm based on normalized cut spectral clustering for sensor network in this paper. The main aim is to reduce the imbalance degree among classes in an intrusion detection system. First, we design a normalized cut spectral clustering to reduce the imbalance degree between every two classes in the intrusion detection data set. Second, we train a network intrusion detection classifier on the new data set. Finally, we do extensive experiments and analyze the experimental results in detail. Simulation experiments show that our algorithm can reduce the imbalance degree among classes and reserves the distribution of the original data on the one hand, and improve effectively the detection performance on the other hand.

Publication types

  • Research Support, Non-U.S. Gov't

MeSH terms

  • Algorithms*
  • Cluster Analysis
  • Models, Theoretical*

Grants and funding

This work was supported by the National Natural Science Foundation of China (Grant Nos. 61402246 to XY, 61602133 to YX, 61572034 to XF), the Shandong Province Natural Science Foundation (Grant Nos. ZR2019MF014 to XY, ZR2017BF023 to LX), Major Science and Technology Projects in Anhui Province (grant number 18030901025 to XF), and the Natural Science Research Project of Universities in Anhui Province (Grant No. KJ2019A0109 to GY). The funders had no role in study design, data collection and analysis, decision to publish, or preparation of the manuscript.