Evolving meta-ensemble of classifiers for handling incomplete and unbalanced datasets in the cyber security domain
详细信息 查看全文
- 作者：G. Folino ; folino@icar.cnr.it" class="auth_mail" title="E-mail the corresponding author ; F.S. Pisani
- 关键词：Ensemble ; Data mining ; Cyber security ; Missing features
- 刊名：Applied Soft Computing
- 出版年：2016
- 出版时间：October 2016
- 年：2016
- 卷：47
- 期：Complete
- 页码：179-190
- 全文大小：965 K
文摘
Cyber security classification algorithms usually operate with datasets presenting many missing features and strongly unbalanced classes. In order to cope with these issues, we designed a distributed genetic programming (GP) framework, named CAGE-MetaCombiner, which adopts a meta-ensemble model to operate efficiently with missing data. Each ensemble evolves a function for combining the classifiers, which does not need of any extra phase of training on the original data. Therefore, in the case of changes in the data, the function can be recomputed in an incremental way, with a moderate computational effort; this aspect together with the advantages of running on parallel/distributed architectures makes the algorithm suitable to operate with the real time constraints typical of a cyber security problem. In addition, an important cyber security problem that concerns the classification of the users or the employers of an e-payment system is illustrated, in order to show the relevance of the case in which entire sources of data or groups of features are missing. Finally, the capacity of approach in handling groups of missing features and unbalanced datasets is validated on many artificial datasets and on two real datasets and it is compared with some similar approaches.