An empirical evaluation for the intrusion detection features based on machine learning and feature selection methods

2017-12-27 · Mouhammd Al-kasassbeh

Despite the great developments in information technology, particularly the Internet, computer networks, global information exchange, and its positive impact in all areas of daily life, it has also contributed to the development of penetration and intrusion which forms a high risk to the security of information organizations, government agencies, and causes large economic losses. There are many techniques designed for protection such as firewall and intrusion detection systems (IDS). IDS is a set of software and/or hardware techniques used to detect hacker's activities in computer systems. Two types of anomalies are used in IDS to detect intrusive activities different from normal user behavior. Misuse relies on the knowledge base that contains all known attack techniques and intrusion is discovered through research in this knowledge base. Artificial intelligence techniques have been introduced to improve the performance of these systems. The importance of IDS is to identify unauthorized access attempting to compromise confidentiality, integrity or availability of the computer network. This paper investigates the Intrusion Detection (ID) problem using three machine learning algorithms namely, BayesNet algorithm, Multi-Layer Perceptron (MLP), and Support Vector Machine (SVM). The algorithms are applied on a real, Management Information Based (MIB) dataset that is collected from real life environment. To enhance the detection process accuracy, a set of feature selection approaches is used; Infogain (IG), ReleifF (RF), and Genetic Search (GS). Our experiments show that the three feature selection methods have enhanced the classification performance. GS with bayesNet, MLP and SVM give high accuracy rates, more specifically the BayesNet with the GS accuracy rate is 99.9%.

📄 PDF Abstract BibTeX arXiv:1712.09623

Code (0)

등록된 구현이 없습니다.

Tasks

BIG-bench Machine Learningfeature selectionIntrusion Detection Management

Methods 이 논문이 사용한 방법론

SVM A Support Vector Machine, or SVM, is a non-parametric supervised learning model. For non-linear classification and regression, they utilise the kernel trick to map inputs…

Feature Analysis for Machine Learning-based IoT Intrusion Detection

2021-08-29 · Mohanad Sarhan, Siamak Layeghy, Marius Portmann

Internet of Things (IoT) networks have become an increasingly attractive target of cyberattacks. Powerful Machine Learning (ML) models have recently been adopted to implement network intrusion detection systems to protec…

Computational Efficiency feature selection Intrusion Detection Network Intrusion Detection

Orthogonal variance-based feature selection for intrusion detection systems

2021-10-25 · Firuz Kamalov, Sherif Moussa, Ziad El Khatib, Adel Ben Mnaouer

In this paper, we apply a fusion machine learning method to construct an automatic intrusion detection system. Concretely, we employ the orthogonal variance decomposition technique to identify the relevant features in ne…

feature selection Intrusion Detection

AMDS: Attack-Aware Multi-Stage Defense System for Network Intrusion Detection with Two-Stage Adaptive Weight Learning

2026-03-01 · Oluseyi Olukola, Nick Rahimi arxiv

Machine learning based network intrusion detection systems are vulnerable to adversarial attacks that degrade classification performance under both gradient-based and distribution shift threat models. Existing defenses t…

Network Intrusion Detection Adversarial Robustness Adversarial Attack

Detection-Rate-Emphasized Multi-objective Evolutionary Feature Selection for Network Intrusion Detection

2024-06-13 · Zi-Hang Cheng, Haopu Shang, Chao Qian

Network intrusion detection is one of the most important issues in the field of cyber security, and various machine learning techniques have been applied to build intrusion detection systems. However, since the number of…

Evolutionary Algorithms feature selection Intrusion Detection Network Intrusion Detection

Empirical Analysis of Adversarial Robustness and Explainability Drift in Cybersecurity Classifiers

2026-02-06 · Mona Rajhans, Vishal Khawarey arxiv

Machine learning (ML) models are increasingly deployed in cybersecurity applications such as phishing detection and network intrusion prevention. However, these models remain vulnerable to adversarial perturbations small…

Network Intrusion Detection Adversarial Robustness