A new hybrid approach for intrusion detection using machine learning methods

被引:89
作者
Cavusoglu, Unal [1 ]
机构
[1] Sakarya Univ, Dept Comp Engn, TR-54187 Serdivan, Sakarya, Turkey
关键词
Intrusion detection system; Machine learning algorithm; Hybrid system; Feature selection; NSL-KDD; FEATURE-SELECTION APPROACH; DETECTION SYSTEM; ANOMALY DETECTION; K-MEANS; CLASSIFICATION; ALGORITHM; SVMS;
D O I
10.1007/s10489-018-01408-x
中图分类号
TP18 [人工智能理论];
学科分类号
081104 ; 0812 ; 0835 ; 1405 ;
摘要
In this study, a hybrid and layered Intrusion Detection System (IDS) is proposed that uses a combination of different machine learning and feature selection techniques to provide high performance intrusion detection in different attack types. In the developed system, firstly data preprocessing is performed on the NSL-KDD dataset, then by using different feature selection algorithms, the size of the dataset is reduced. Two new approaches have been proposed for feature selection operation. The layered architecture is created by determining appropriate machine learning algorithms according to attack type. Performance tests such as accuracy, DR, TP Rate, FP Rate, F-Measure, MCC and time of the proposed system are performed on the NSL-KDD dataset. In order to demonstrate the performance of the proposed system, it is compared with the studies in the literature and performance evaluation is done. It has been shown that the proposed system has high accuracy and a low false positive rates in all attack types.
引用
收藏
页码:2735 / 2761
页数:27
相关论文
共 101 条
[1]   Multi-level hybrid support vector machine and extreme learning machine based on modified K-means for intrusion detection system [J].
Al-Yaseen, Wathiq Laftah ;
Othman, Zulaiha Ali ;
Nazri, Mohd Zakree Ahmad .
EXPERT SYSTEMS WITH APPLICATIONS, 2017, 67 :296-303
[2]   An enhanced J48 classification algorithm for the anomaly intrusion detection systems [J].
Aljawarneh, Shadi ;
Yassein, Muneer Bani ;
Aljundi, Mohammed .
CLUSTER COMPUTING-THE JOURNAL OF NETWORKS SOFTWARE TOOLS AND APPLICATIONS, 2019, 22 (Suppl 5) :10549-10565
[3]  
Almuallim H., 1991, Proceedings of the Ninth Canadian Conference on Artificial Intelligence, P38
[4]  
Alpaydin E, 2014, ADAPT COMPUT MACH LE, P1
[5]   FuzMet: a fuzzy-logic based alert prioritization engine for intrusion detection systems [J].
Alsubhi, Khalid ;
Aib, Issam ;
Boutaba, Raouf .
INTERNATIONAL JOURNAL OF NETWORK MANAGEMENT, 2012, 22 (04) :263-284
[6]   Building an Intrusion Detection System Using a Filter-Based Feature Selection Algorithm [J].
Ambusaidi, Mohammed A. ;
He, Xiangjian ;
Nanda, Priyadarsi ;
Tan, Zhiyuan .
IEEE TRANSACTIONS ON COMPUTERS, 2016, 65 (10) :2986-2998
[7]   Mutual information-based feature selection for intrusion detection systems [J].
Amiri, Fatemeh ;
Yousefi, MohammadMahdi Rezaei ;
Lucas, Caro ;
Shakery, Azadeh ;
Yazdani, Nasser .
JOURNAL OF NETWORK AND COMPUTER APPLICATIONS, 2011, 34 (04) :1184-1199
[8]  
[Anonymous], SCI WORLD J
[9]  
[Anonymous], ARXIV14037726
[10]  
[Anonymous], 2011, INT J COMPUT SCI ISS