METHOD FOR PACKET IMAGE CONVERSION IN SVM INTRUSION DETECTION

摘要

PURPOSE: A method for converting a packet image for SVM(Support Vector Machine) intrusion detection is provided to effectively convert a packet image used for network intrusion detection through SVM application. CONSTITUTION: A characteristic information domain of data used for intrusion detection is extracted(S41). Each byte value of the characteristic information domain is divided by 255. Each byte is generated by packet images which are converted to have a value between 0 and 1(S43). The packet images are collected to configure the entire packet image pattern(S46). The characteristic information domain is header information of each data.