Abstract: The recent intrusion detection systems based on machine learning generally assume that the intrusion traffic always satisfies stationary of statistics. However, this assumption is not always held when adversaries arbitrarily alter the distribution of traffic data, or develop new attack techniques, which may reduce the detection rate. To overcome this adversarial drift, a novel drift detection approach based on weighted Rényi distance was suggested. The experiment on KDD Cup99 shows that the weighted Rényi distance is able to perfectly detect the adversarial drift, and improve the intrusion detection rate by retraining the model.


论文引用格式：钱亚冠,关晓惠.网络入侵检测系统中的漂移检测.电信科学,2015058
Qian Y G,Guan X H.Adversarial drift detection in intrusion detection system.Telecommunications Science,2015058