J4 ›› 2014, Vol. 41 ›› Issue (4): 144-150.doi: 10.3969/j.issn.1001-2400.2014.04.025

• 研究论文 • 上一篇    下一篇

面向异常检测的时间序列树突状细胞算法

田玉玲   

  1. (太原理工大学 计算机科学与技术学院,山西 太原  030024)
  • 收稿日期:2013-10-17 出版日期:2014-08-20 发布日期:2014-09-25
  • 通讯作者: 田玉玲
  • 作者简介:田玉玲(1963-),女,副教授,博士,E-mail: tianyuling@tyut.edu.cn.
  • 基金资助:

    国家自然科学基金重点资助项目(50335030);山西省基金资助项目(2013011018-1)

Dendritic cell algorithm for time series oriented anomaly detection

TIAN Yuling   

  1. (College of Computer Science and Technology, Taiyuan Univ. of Technology, Taiyuan  030024, China)
  • Received:2013-10-17 Online:2014-08-20 Published:2014-09-25
  • Contact: TIAN Yuling

摘要:

针对树突状细胞算法中信号及参数的定义存在高度随机性,导致检测率较低的问题,提出了一种时间序列数据的异常检测树突状细胞算法.采用多维数据流相关性分析和变化点检测方法对抗原进行检测,遴选出能够反映突变状态的关键点数据作为异常活动候选解;基于变化点子空间追踪算法提取特征集,准确地获取及分类各种输入信号子空间;在算法的上下文评估中加入动态迁移阈值的概念,累积一定窗口时间内的抗原评估,有效地减少了误判率.通过仿真实验证明该算法能够利用更少的存储空间和计算资源,有效地提高异常检测的检测率与准确率,具有更高的稳定性.

关键词: 树突状细胞算法, 异常检测, 时间序列, 信号处理, 子空间追踪, 变化点检测

Abstract:

Aiming at the fact that the high randomness existing in definitions of signals and the antigen results in the lower detection rate used by the Dendritic Cell Algorithm, the Dendritic Cell Algorithm for anomaly detection based on time series is proposed. The underlying methodology is to perform antigen detection via the change point detection and multiple data streams correlation analysis, and the change point data reflecting the mutation status as the candidate solution of the abnormal is selected. Features are extracted based on the subspace tracker algorithm and various input signal subspaces are obtained and classified precisely. A dynamic migration threshold is incorporated into the context evaluation of the algorithm. The accumulation of the antigen assessment in a certain window time decreases the false positive rate effectively. Simulation demonstrates that the algorithm shows a better performance on the detection rate, accuracy rate and stability with less memory space and computing resource.

Key words: dendritic cell algorithm, anomaly detection, time series, signal processing, subspace tracker, change point detecting

中图分类号: 

  • TP3
Baidu
map