Dynamic Fuzzy Rule Interpolation and Its Application to Intrusion Detection
Open Access
- 4 December 2017
- journal article
- research article
- Published by Institute of Electrical and Electronics Engineers (IEEE) in IEEE Transactions on Fuzzy Systems
- Vol. 26 (4), 1878-1892
- https://doi.org/10.1109/tfuzz.2017.2755000
Abstract
Fuzzy rule interpolation (FRI) offers an effective approach for making inference possible in sparse rule-based systems (and also for reducing the complexity of fuzzy models). However, requirements of fuzzy systems may change over time and hence, the use of a static rule base may affect the accuracy of FRI applications. Fortunately, an FRI system in action will produce interpolated rules in abundance during the interpolative reasoning process. Whilst such interpolated results are discarded in existing FRI systems, they can be utilised to facilitate the development of a dynamic rule base in supporting subsequent inference. This is because the otherwise relinquished interpolated rules may contain possibly valuable information, covering regions that were uncovered by the original sparse rule base. This paper presents a dynamic fuzzy rule interpolation (D-FRI) approach by exploiting such interpolated rules in order to improve the overall systems coverage and efficacy. The resulting D-FRI system is able to select, combine, and generalise informative, frequently used interpolated rules for merging with the existing rule base while performing interpolative reasoning. Systematic experimental investigations demonstrate that D-FRI outperforms conventional FRI techniques, with increased accuracy and robust- ness. Furthermore, D-FRI is herein applied for network security analysis, in devising a dynamic intrusion detection system (IDS) through integration with the Snort software, one of the most popular open source IDSs. This integration, denoted as D-FRI- Snort hereafter, delivers an extra amount of intelligence to predict the level of potential threats. Experimental results show that with the inclusion of a dynamic rule base, by generalising newly interpolated rules based on the current network traffic conditions, D-FRI-Snort helps reduce both false positives and false negatives in intrusion detection.Keywords
This publication has 46 references indexed in Scilit:
- Exploiting Data Reliability and Fuzzy Clustering for Journal RankingIEEE Transactions on Fuzzy Systems, 2016
- Rough-fuzzy rule interpolationInformation Sciences, 2016
- Weighted fuzzy interpolative reasoning for sparse fuzzy rule-based systems based on piecewise fuzzy entropies of fuzzy setsInformation Sciences, 2016
- Fuzzy interpolative reasoning based on the ratio of fuzziness of rough-fuzzy setsInformation Sciences, 2015
- Fuzzy Rules Interpolation for Sparse Fuzzy Rule-Based Systems Based on Interval Type-2 Gaussian Fuzzy Sets and Genetic AlgorithmsIEEE Transactions on Fuzzy Systems, 2012
- Fuzzy interpolative reasoning for sparse fuzzy rule-based systems based on the ranking values of fuzzy setsExpert Systems with Applications, 2008
- Fuzzy Interpolative Reasoning Via Cutting and Transformations TechniquesPublished by Springer Science and Business Media LLC ,2007
- Fuzzy Rule Interpolation Based on Polar CutsPublished by Springer Science and Business Media LLC ,2006
- A fuzzy rule interpolation technique based on bi-splines in multiple input systemsPublished by Institute of Electrical and Electronics Engineers (IEEE) ,2002
- Interpolation and extrapolation of fuzzy quantities - the multiple-dimensional caseSoft Computing, 2002