针对现有数据库服务器异常检测方法存在计算量较大,系统资源消耗较大的问题,引入危险理论中的树突状细胞算法(DCA)进行检测.首先对数据库服务器的运行特征进行分析;其次建立数据库服务器异常检测的多维指标体系,并对指标进行归一化处理;最后应用树突状细胞算法对其运行状态进行异常检测.实验结果表明树突状细胞算法在数据库服务器的异常检测中消耗较少的系统资源,并具有较高的准确率和较低的误报率.
The existing approaches of anomaly diagnose for database servers need a large amount of computation and consume a lot of system resources. This paper incorporated the dendritic cells algorithm(DCA), which was based on danger theory, into database servers' anomaly detection. Firstly, it analyzed runtime characteristics of database servers. Secondly, to evaluate server's characteristics, it built multidimensional metrics which were normalized between 1 and 10. Finally, it performed DCA on data that we collected from database servers. An empirical analysis on the dataset revealed that our approach performed well on improving detection accuracy and reducing false positive rate.