Optimal Sampling for Class Balancing with Machine Learning Technique for Intrusion Detection System
نویسندگان
چکیده
Information security is becoming a more important issue in modern computer system. Intrusion Detection System (IDS) as the main security defensive technique that can effectively expand the scope of defense against network intrusion. Data Mining and Machine Learning techniques proved useful and attracted increasing attention in the network intrusion detection research area. Recently, many machine learning methods have also been applied by researchers, to obtain high detection rate. Unfortunately a potential drawback of all those methods is that how to classify attack or intrusion effectively. Looking at such inadequacies, the machine learning technique on balanced classes of data is applied for obtaining the high detection rate. Also, use of internet is increasing progressively, so that large amount of data and it security is also an issue. Sampling technique is one the solution for large datasets. This work proposes a sampling technique for obtaining the sampled data. Sampled dataset represent the whole dataset with proper class balancing. Imbalanced classes can be balanced by sampling techniques. The purpose of this paper is to propose attack classification framework based on a different model. This model also based on machine learning and sampling to improve the classification performance. The proposed work is tested on basis of Accuracy, Error rate, Detection rate and False Alarm rate. KDD CUP'99 dataset used for the approach proposed in this paper. This work suggests the framework for classification of abnormal and normal data and detect intrusions even in large datasets with short training and testing times.
منابع مشابه
A Hybrid Machine Learning Method for Intrusion Detection
Data security is an important area of concern for every computer system owner. An intrusion detection system is a device or software application that monitors a network or systems for malicious activity or policy violations. Already various techniques of artificial intelligence have been used for intrusion detection. The main challenge in this area is the running speed of the available implemen...
متن کاملImproving Accuracy in Intrusion Detection Systems Using Classifier Ensemble and Clustering
Recently by developing the technology, the number of network-based servicesis increasing, and sensitive information of users is shared through the Internet.Accordingly, large-scale malicious attacks on computer networks could causesevere disruption to network services so cybersecurity turns to a major concern fornetworks. An intrusion detection system (IDS) could be cons...
متن کاملAnomaly Detection Using SVM as Classifier and Decision Tree for Optimizing Feature Vectors
Abstract- With the advancement and development of computer network technologies, the way for intruders has become smoother; therefore, to detect threats and attacks, the importance of intrusion detection systems (IDS) as one of the key elements of security is increasing. One of the challenges of intrusion detection systems is managing of the large amount of network traffic features. Removing un...
متن کاملAssessment Methodology for Anomaly-Based Intrusion Detection in Cloud Computing
Cloud computing has become an attractive target for attackers as the mainstream technologies in the cloud, such as the virtualization and multitenancy, permit multiple users to utilize the same physical resource, thereby posing the so-called problem of internal facing security. Moreover, the traditional network-based intrusion detection systems (IDSs) are ineffective to be deployed in the cloud...
متن کاملAn intrusion detection system using network traffic profiling and online sequential extreme learning machine
Anomaly based Intrusion Detection Systems (IDS) learn normal and anomalous behavior by analyzing network traffic in various benchmark datasets. Common challenges for IDSs are large amounts of data to process, low detection rates and high rates of false alarms. In this paper, a technique based on the Online Sequential Extreme Learning Machine (OS-ELM) is presented for intrusion detection. The pr...
متن کامل