دانلود مقاله ISI انگلیسی شماره 76937
عنوان فارسی مقاله

تشخیص ناهنجاری های متوالی بر اساس یادگیری زمانی تفاوت: اصول، مدل ها و مطالعات موردی ☆

کد مقاله سال انتشار مقاله انگلیسی ترجمه فارسی تعداد کلمات
76937 2010 9 صفحه PDF سفارش دهید محاسبه نشده
خرید مقاله
پس از پرداخت، فوراً می توانید مقاله را دانلود فرمایید.
عنوان انگلیسی
Sequential anomaly detection based on temporal-difference learning: Principles, models and case studies ☆
منبع

Publisher : Elsevier - Science Direct (الزویر - ساینس دایرکت)

Journal : Applied Soft Computing, Volume 10, Issue 3, June 2010, Pages 859–867

کلمات کلیدی
تشخیص ناهنجاری؛ زمانی- تفاوت؛ فرآیندهای پاداش مارکوف؛ یادگیری پیش بینی؛ امنیت رایانه؛ یادگیری تقویت
پیش نمایش مقاله
پیش نمایش مقاله تشخیص ناهنجاری های متوالی بر اساس یادگیری زمانی تفاوت: اصول، مدل ها و مطالعات موردی ☆

چکیده انگلیسی

Anomaly detection is an important problem that has been popularly researched within diverse research areas and application domains. One of the open problems in anomaly detection is the modeling and prediction of complex sequential data, which consist of a series of temporally related behavior patterns. In this paper, a novel sequential anomaly detection method based on temporal-difference (TD) learning is proposed, where the anomaly detection problem of multi-stage cyber attacks is considered as an application case. A Markov reward process model is presented for the anomaly detection and alarming process of sequential data and it is verified that when the reward function is properly defined, the anomaly probabilities of sequential behaviors are equivalent to the value functions of the Markov reward process. Therefore, TD learning algorithms in the reinforcement learning literature can be used to efficiently construct anomaly detection models of complex sequential behaviors by estimating the value functions of the Markov reward process. Compared with other machine learning methods for anomaly detection, the proposed approach has the advantage of simplified labeling process using delayed evaluative signals and the prediction accuracy can be improved even if labeled training data are limited. Based on the experimental results on intrusion detection of host computers using system call data, it was shown that the proposed anomaly detection method can achieve higher or at least comparable detection accuracies than other approaches including SVMs, and HMMs.

خرید مقاله
پس از پرداخت، فوراً می توانید مقاله را دانلود فرمایید.