APPARATUS AND METHOD FOR DETECTING INTRUSION USING PRINCIPAL COMPONENT ANALYSIS

摘要

The present invention relates to an intrusion detection apparatus based on a main component analysis and a method thereof. The apparatus includes: a main component analysis unit which obtains a new data set D (N×d) by reducing the number of data dimensions in a data set S (N×D) collected from a predetermined file; and an intrusion detection model generation unit which calculates a gain ratio of an optimal dividing point of continuous properties included in the new data set D (N×d) obtained by the main component analysis unit, compares the calculated gain ratio of each property, configures a tree structure by applying a classification algorithm based on the property having a maximum gain ratio and the optimal division unit of the corresponding property, and generates an intrusion invasion model by calculating the class type of the test data in the configured tree structure.