基于综合相关置信度的告警关联规则挖掘

doi:10.3969/j.issn.1000-0801.2014.10.017

电信科学 ›› 2014, Vol. 30 ›› Issue (10): 110-115.doi: 10.3969/j.issn.1000-0801.2014.10.017

基于综合相关置信度的告警关联规则挖掘

高会生,李英敏

华北电力大学电子与通信工程系保定 071000

出版日期:2014-10-15 发布日期:2017-06-29
基金资助:
中央高校基本科研业务费专项资金资助项目

Mining Alarm Association Rules Based on Comprehensive Related Confidence

Huisheng Gao,Yingmin Li

Department of Electronic and Communication Engineering of North China Electric Power University, Baoding 071000, China

Online:2014-10-15 Published:2017-06-29

摘要/Abstract

摘要：

采用置信度融合算法计算相邻告警的综合相关置信度，并根据计算结果形成告警关联事务，增强告警事务内告警之间的相关性，降低对支持度的选择要求，有效挖掘出“低支持度-置信度”告警关联规则。利用h-置信度理论筛选有意义的告警关联规则，并通过实验比较了传统方法和本文方法的执行效率和挖掘正确率。

关键词: 告警关联规则, 综合相关置信度, h-置信度

Abstract:

The traditional association rules mining algorithms preferred to applying single sliding time window, and the mined alarm association rules were high support-high confidence. To solve this problem, a method was proposed to calculate comprehensive related confidence between the time adjacent items by the confidence fusion algorithm. Then generated alarm transactions were generated based on the calculated results, which enhanced alarm correlation within a transaction. The proposed approach can reduce the choice of support requirement and mine low support-high confidence association rules effectively. Based on h-confidence theory, interesting alarm association rules were screened. Experimental results showed the feasibility and effectiveness of this approach.

Key words: alarm association rule, comprehensive related confidence, h-confidence theory

高会生,李英敏. 基于综合相关置信度的告警关联规则挖掘[J]. 电信科学, 2014, 30(10): 110-115.

Huisheng Gao,Yingmin Li. Mining Alarm Association Rules Based on Comprehensive Related Confidence[J]. Telecommunications Science, 2014, 30(10): 110-115.

图/表 5

图2

表1

告警事务数目对比"

$\frac{T R_{1}}{T W} / s$	传统方法获得的告警事务数目	本文方法获得告警事务数目
780	1 603	1 221
660	1 605	1 156
500	1 691	1 289
300	1 864	1 445
180	2 079	1 507

表1

图3

表2

有效信息覆盖率和有效信息丢失率对比"

$\frac{T R_{1}}{T W} / s$	\|S₁\|	\|S₂\|	\|S\|	CICR₁₂	CICR₂₁	\|S₂₁\|	\|S₁₂\|	CILR₂₁	CILR₁₂
780	161	159	158	98.13%	99.37%	3.	1	1.89%	0.62%
660	161	159	158	98.13%	99.37%	3	1	1.89%	0.62%
500	158	159	156	98.73%	98.11%	2	3	1.26%	1.90%
300	156	158	156	100%	98.73%	0	2	0.00%	1.28%
180	155	157	153	98.71%	97.45%	2	4	1.27%	2.58%

表2

表3

参考文献 9

1	Mannila H , Toivonen H Verkamo I A ． Discovery of frequent episodes in event sequences. Data Mining and Knowledge Discovery, 1997 (1)
2	徐前方，肖波，郭军．挖掘电信告警关联模式方法．北京邮电大学学报， 2011， 34(2): 86～89
3	夏英，张俊，王国胤．时空关联规则挖掘算法及其在ITS中的应用．计算机科学， 2011， 38(9): 173～176
4	Lagzian S , Amiri F , Enayati A . Frequent item set mining-based alert correlation for extracting multi-stage attack scenarios. Proceedings of the 6th International Symposium on Digital Object Identifier, Iran, Tehran, 2012
5	田志宏，张永铮，张伟哲等. 基于模式挖掘和聚类分析的自适应告警关联．计算机研究与发展， 2009, 46(8): 1304～1315
6	吴简，李兴明．基于关联规则的分布式通信网告警相关性研究．计算机科学， 2009， 36(11): 204～207
7	Han J W . Mining frequent patterns without candidate generation. Proceedings of the 2000 ACM SIGMOD International Conference on Management of Data, New York, USA, 2000
8	刘镜，刘加．置信度的原理及其在语音识别中的应用．计算机研究与发展， 2000， 37(7): 882～889
9	王海栋，郑骁庆，张红俊．基于置信度理论的网络知识融合系统和应用．计算机系统应用， 2011， 20(1): 1～6

告警关联规则序列	h-置信度
CP_OSPF_NB_DOWN.CP_TEL_DOWN	75.80%
…	…
CP_OSPF_NB_DOWN.CP_TEL_DOWN.	50.12%
CP_OSPF_CL_DOWN.CP_CC_DOWN.
CP_SER_NOT_OR.CP_TEL_DEG.CP_SER_INT

基于综合相关置信度的告警关联规则挖掘

Mining Alarm Association Rules Based on Comprehensive Related Confidence

在线阅读

PDF下载

可视化

摘要/Abstract

引用本文

使用本文

图/表 5

参考文献 9

相关文章 0

Metrics

推荐阅读 0