An approach to reduce data dimension in building effective Network Intrusion Detection Systems

Thanh, Hoang Ngoc and Lang, Tran Van (2019) An approach to reduce data dimension in building effective Network Intrusion Detection Systems. EAI Endorsed Transactions on Context-aware Systems and Applications, 6 (18): e3. ISSN 2409-0026

[img]
Preview
Text
eai.13-7-2018.162633.pdf - Published Version
Available under License Creative Commons Attribution No Derivatives.

Download (2MB) | Preview

Abstract

The main function of the network Intrusion Detection System (IDS) is to protect the system, analyze and predict network access behavior of users. These behaviors are considered normal or an attack. Machine learning methods (ML) are used in IDSs because of the ability to learn from past attack patterns to recognize new attack patterns. These methods are effective but have relatively high computational costs. Meanwhile, the traffic of network data is growing rapidly, the computational cost issues need to be addressed. This paper addresses the use of algorithms combined with information metrics to reduce the features of the dataset to be analyzed. As the result, it helps to build IDSs with lower cost but higher performance suitable for large scale networks. The test results on the UNSW-NB15 dataset demonstrate: with the optimal set of features suitable for the attack type as well as the machine learning method, the quality of classification is improved with less training and testing time.

Item Type: Article
Uncontrolled Keywords: Intrusion Detection System, Machine learning, Feature selection, UNSW-NB15 dataset
Subjects: Q Science > QA Mathematics > QA75 Electronic computers. Computer science
QA75 Electronic computers. Computer science
Depositing User: EAI Editor II.
Date Deposited: 14 Sep 2020 11:22
Last Modified: 14 Sep 2020 11:22
URI: https://eprints.eudl.eu/id/eprint/286

Actions (login required)

View Item View Item