Building an Efficient Intrusion Detection System Based on Feature Selection and Ensemble Classifier
Intrusion detection system (IDS) is one of extensively used techniques in a network topology to safeguard the integrity and availability of sensitive assets in the protected systems. Although many supervised and unsupervised learning approaches from the field of machine learning have been used to increase the efficacy of IDSs, it is still a problem for existing intrusion detection algorithms to achieve good performance. First, lots of redundant and irrelevant data in high-dimensional datasets interfere with the classification process of an IDS. Second, an individual classifier may not perform well in the detection of each type of attacks. Third, many models are built for stale datasets, making them less adaptable for novel attacks. Thus, we propose a new intrusion detection framework in this paper, and this framework is based on the feature selection and ensemble learning techniques. In the first step, a heuristic algorithm called CFS-BA is proposed for dimensionality reduction, which selects the optimal subset based on the correlation between features. Then, we introduce an ensemble approach that combines C4.5, Random Forest (RF), and Forest by Penalizing Attributes (Forest PA) algorithms. Finally, voting technique is used to combine the probability distributions of the base learners for attack recognition. The experimental results, using NSL-KDD, AWID, and CIC-IDS2017 datasets, reveal that the proposed CFS-BA-Ensemble method is able to exhibit better performance than other related and state of the art approaches under several metrics.
Code (0)
등록된 구현이 없습니다.
Tasks
Anomaly DetectionDimensionality ReductionEnsemble Learningfeature selectionGeneral ClassificationIntrusion DetectionNetwork Intrusion DetectionSimilar Papers 제목 키워드 기반
Feature selection for intrusion detection systems
In this paper, we analyze existing feature selection methods to identify the key elements of network traffic data that allow intrusion detection. In addition, we propose a new feature selection method that addresses the …
feature selectionIntrusion DetectionShallow and Deep Networks Intrusion Detection System: A Taxonomy and Survey
Intrusion detection has attracted a considerable interest from researchers and industries. The community, after many years of research, still faces the problem of building reliable and efficient IDS that are capable of h…
BIG-bench Machine Learningfeature selectionIntrusion DetectionSurveyFeature Reduction Method Comparison Towards Explainability and Efficiency in Cybersecurity Intrusion Detection Systems
In the realm of cybersecurity, intrusion detection systems (IDS) detect and prevent attacks based on collected computer and network data. In recent research, IDS models have been constructed using machine learning (ML) a…
feature selectionIntrusion DetectionRelevant Feature Selection Model Using Data Mining for Intrusion Detection System
Network intrusions have become a significant threat in recent years as a result of the increased demand of computer networks for critical systems. Intrusion detection system (IDS) has been widely deployed as a defense me…
feature selectionIntrusion DetectionNetwork Intrusion Detection Using Wrapper-based Decision Tree for Feature Selection
One of the key challenges of machine learning (ML) based intrusion detection system (IDS) is the expensive computational complexity which is largely due to redundant, incomplete, and irrelevant features contain in the ID…
feature selectionIntrusion DetectionNetwork Intrusion Detection