K-Modes Clustering Algorithm Based on Weighted Overlap Distance and Its Application in Intrusion Detection

Abstract

In order to better apply the K-modes algorithm to intrusion detection, this paper overcomes the problems of the existing K-modes algorithm based on rough set theory. Firstly, for the problem of K-modes clustering in the initial class center selection, an initial class center selection algorithm Ini_Weight based on weighted density and weighted overlap distance is proposed. Secondly, based on the Ini_Weight algorithm, a new K-modes clustering algorithm WODKM based on weighted overlap distance is proposed. Thirdly, the WODKM clustering algorithm is applied to intrusion detection to obtain a new unsupervised intrusion detection model. The model detects the intrusion by dividing the clusters in the clustering result into normal clusters and abnormal clusters and analyzing the weighted average density of the object x to be detected in each cluster and the weighted overlapping distance of x and each center point. We verified the intrusion detection performance of the model on the KDD Cup 99 dataset. The experimental results of the current study show that the proposed intrusion detection model achieves efficient results and solves the problems existing in the present-day intrusion detection system to some extent.

Analisis cluster data latar belakang ekonomi mahasiswa untuk rekomendasi penentuan uang kuliah tunggal dengan model K-Modes

“…Clustering adalah metode statistik multivariat modern dalam mempelajari kesamaan sampel yang berbeda, dengan mengelompokkan sekumpulan objek ke dalam kelaskelas atau cluster sedemikian rupa sehingga objek-objek dalam suatu cluster memiliki kemiripan antara satu dengan yang lain. Kemiripan antar objek dalam satu grup dibuat setinggi-tingginya, dan kemiripan objek antar grup yang berbeda dibuat seminimal mungkin [12]. Clustering digunakan untuk mengelompokkan data atau objek menjadi kelompok-kelompok yang serupa berdasarkan karakteristik atau atribut yang dimiliki oleh objek tersebut.…”

“…Berdasarkan metode Elbow, diperoleh jumlah cluster terbaik sebanyak 4 dan 8 [17]. Dalam bidang keamanan jaringan, k-Modes juga digunakan dalam mendeteksi serangan atau intrusi pada jaringan internet dengan membaginya menjadi 2 cluster, yaitu normal dan abnormal [12]. K-Modes juga diterapkan dalam pengelompokan karakteristik calon Tenaga Kerja Indonesia dan terbentuk 2 cluster [18].…”

Machine Learning Clustering Analysis Towards Educator’s Readiness to Adopt Augmented Reality as a Teaching Tool

“…Since this study deals with categorical data, K-modes was used instead. This algorithm is an extension of K-means algorithm [13] and is being widely used in applications. As for similarity measure to group or cluster attributes of non-numerical data, simple matching coefficient (SMC) was used [59].…”