Bahan Presentasi Teknik Elektro dan Informatika Lanjut 1 dan 2Multi-Agent Intrusion Detection System in Industrial Network using Ant Colony Clustering Approach and Unsupervised Feature Extraction Oleh : Chi-Ho Tsang and Sam Kwong Company LOGO
Inside Monitor Agent (M)Raw network packets Feature type Packet capture enginecaptured from subnets construction Pre-processed data sent to communication PCA dimensionality ICA feature extraction module of its reduction associiated Decission Agent
Evolving ACO-MH • Deneubourg • Dorigo dkk dkk • Dorigo dkk Binary • Goss dkk • Addition of Bridge SACO • Double Ant System heuristic Experiment • Path Bridge (AS) information Selection Experiment (β) Process • Maniezo & Ant • Gambardella Colorni, 1999 & Dorigo Modified Colony Max-Min • Ellitis AS • 4 difference AS System aspects from AS • Use only α (ACS) AS Fast Ant Ant-Q System Antabu (FANT) AS-Fundamentals of Computational Swarm Intelligence Rank ANTSAndries P. EngelbrechtWiley & Sons @2005
Perkembangan Ant SystemBINARY BRIDGE EXPERIMENT
Binary Bridge Experiment The probability of the next ant to choose path A at time step t + 1 is given as, where c quantifies the degree of attraction of an unexplored branch, α is the bias to using pheromone deposits in the decision process This algorithm is executed at each point where the ant needs to make a decision.Goss et al. extended the it is assumed that ants deposit the same amount of pheromonebinary bridge experiment and that pheromone does not evaporate
Perkembangan Ant SystemSIMPLE ANT COLONYOPTIMIZATION - SACO
SACO - Transition ProbabilityIf ant k is currently located at node i, it selects the next node j ∈ Nki , based on thetransition probability: ij is pheromone concentration associtated with edge (i,j)A number of ants, k = 1, . . . , nk, are placed on the source node.Nki is the set of feasible nodes connected to node i, with respect to ant k.α is a positive constant used to amplify the influence of pheromone concentrations.
SACO – Amount of deposit pheromoneAfter a complete path from the origin node to the destination node is accomplished,and all loops have been removed, each ant retraces its path to the source nodedeterministically, and deposits a pheromone amount, to each link, (i, j), of the corresponding path; Lk(t) is the length of the path constructed by ant k at time step t. That is, (17.4) Where nk is the number of ants
SACO – evaporation of pheromone intensitiesAnts rapidly converge to a solution, and that little time is spent exploring alternativepaths.To explore more, and to prevent premature convergence, pheromone intensities onlinks are allowed to “evaporate” at each iteration of the algorithm before beingreinforced on the basis of the newly constructed paths.For each link, (i, j), letwith ρ ∈ [0, 1].The constant, ρ, specifies the rate at which pheromones evaporate.The large values of ρ, pheromone evaporates rapidly, while small values of ρ resultin slower evaporation rates.The more pheromones evaporate, the more random the search becomes, facilitatingbetter exploration. For ρ = 1, the search is completely random.
First Ant Algorithm (by Dorigo, Maniezo & Colorni)ANT SYSTEM - AS
AS – Adding the heuristic (17.6) ij = aposteriori effectiveness of the move from i to j (pheromone intensity) explorationηij = apriori effectiveness of the move from i to j (desirability/attractiveness/visibility) exploitation k , defines the set of feasible nodes for ant k when located on node i. i To prevent loops, Nki may include all nodes not yet visited by ant k. For this purpose, a tabu list is usually maintained for each ant. As an ant visits a new node, that node is added to the ant’s tabu list. Nodes in the tabu list are removed from Nki , ensuring that no node is visited more than once.
AS – ModifiedManiezzo and Colorni:Pheromone evaporation: (17.5)After completion of a path by each ant, the pheromone on each link is updated as with (17.10) the amount of pheromone deposited by ant k on link (i, j) and k at time step t. (17.14)