You are here

An Ensemble Data Mining Approach for Intrusion Detection in a Computer Network

Journal Name:

Publication Year:

Abstract (2. Language): 
As activities being done on the internet keep expanding every day due to the fact that we are in the era of the information age, securing sensitive and crucial data on computer networks against malicious attacks tends to be a challenging issue. Designing effective Intrusion Detection Systems (IDSs) with maximized accuracy and low rate of false alarms is an imperative need in the world of cyber attacks. This work was designed to employ an ensemble data mining technique for improving IDSs by carrying out some experiments using the KDD 99 intrusion dataset. Dataset was fragmented into five, representing the major categories of attacks: Normal, DOS (Denial of Service), Probing (Information gathering), R2L (Remote to Local) and U2R (User to Root). An ensemble classifier using the Stacking method with the Naïve Bayes and Multilayer perceptron algorithms as the base classifiers and J48 as the meta learner was developed. The base classifiers were also employed on the dataset individually, and performance comparison was done between individual classifiers and the ensemble classifier. A 10-fold cross validation for training and testing of data and Gain ratio technique for filtering of the dataset was adopted. Ensemble classifier maximized accuracy the most and helped in reduction of false positives of the U2R attack type.
73
77

REFERENCES

References: 

[1] Summers R. C. (1997). Secure computing: threats and safeguards. New York: McGraw Hill:
[2] Mounji. A. (1997). Languages and Tools for Rule Based Distributed Intrusion Detection .PhD Thesis ,Faculties Universaitres Notre-Dame dela Paix Namur.
[3] Nadiammai G. V., Krishaveni S., .Hemalatha M. (2011) – “A comprehensive Analysis and study in intrusion detection system using data mining Techniques”. IJCA, Volume 35 –No.8.
[4] Youssef A. and Emam. A. (2011). Network intrusion detection using data mining and network behaviour, International Journal of Computer Science & Information Technology (IJCSIT), Vol. 3, No 6.
[5] Iwan, Syarif Ed, Zaluska, Adam Prugel-Bennett, Gary Wills (2012): Application of Bagging, Boosting and Stacking to Intrusion Detection, School of Electronics and Computer Science, University of Southampton, UK.
[6] Zhao H. (2014). Intrusion Detection Ensemble Algorithm based on Bagging and Neighbourhood Rough Set, International Journal of Security and Its Applications Vol.7, No.5 pp.193-204.
[7] Subbulakshmi T, Ramamoorthi A, and Shalinie S. M. (2009). Ensemble design for intrusion detection systems, International Journal of Computer science & Information Technology (IJCSIT), Vol 1, No 1.
[8] Singh S and Sanjay (2009). An ensemble approach for feature selection of Cyber Attack Dataset, International Journal of Computer Science and Information Security IJCSIS, Vol. 6, No. 2.
[9] Borji. A. (2007). Combining Heterogeneous Classifiers for Network Intrusion Detection Cervesato (Ed.): ASIAN 2007, LNCS 4846, pp. 254 – 260.© Springer-Verlag Berlin Heidelberg.
[10] Govindarajan M. and Chandrasekaran R. M. (2012). Intrusion Detection using an Ensemble of Classification Methods, Proceedings of the World Congress on Engineering and Computer Science Vol. I WCECS , October 24-26, San Francisco, USA.
[11] Ibrahim H, Badr. M , Shaheen. A. (2012). Adaptive Layered Approach using Machine Learning Techniques with Gain Ratio for Intrusion Detection Systems, International Journal of Computer Applications (0975 – 8887), Volume 56– No.7.
[12] Yimin Wu, (2004). High –dimensional Pattern Analysis in Multimedia Information Retrieval and Bioinformatics, Doctoral Thesis, State University of New York, January 2004.

Thank you for copying data from http://www.arastirmax.com