Indirect classification approaches: A comparative study in network intrusion detection

International Journal of Computer Applications in Technology

Volumn 27, Issue 4, 2006, Pages 232-245

  Khoshgoftaar, Taghi M ^a   Gao, Kehan ^b   Lin, Hua ^a  

^a Florida Atlantic University   (United States)

^b EASTERN CONNECTICUT STATE UNIVERSITY   (United States)

Author keywords

Binary classifiers; Hamming decoding; Indirect combining techniques; Loss based decoding; Multi group classifications; Network intrusion detection systems; Soft max function

Indexed keywords

CLASSIFICATION (OF INFORMATION); CLASSIFIERS; DATA MINING; DECODING; LEARNING SYSTEMS; PROBLEM SOLVING;

BINARY CLASSIFICATION; BINARY CLASSIFIERS; HAMMING DECODING; NETWORK INTRUSION DETECTION;

COMPUTER NETWORKS;

EID: 33847145889     PISSN: 09528091     EISSN: None     Source Type: Journal    
DOI: 10.1504/IJCAT.2006.011995     Document Type: Article

References (37)

1. Agarwal, R. and Joshi, M.V. (2000) PNrule: A New Framework for Learning Classifier Models in Data Mining, Technical TR 00-015, Department of Computer Science, University of Minnesota, Minneapolis, MN 55455.
2. Allwein, E.L., Schapire, R.E. and Singer, Y. (2000) 'Reducing multiclass to binary: a unifying approach for margin classifiers', Journal of Machine Learning Research, December, Vol. 1, pp.113-141.
3. Bredensteiner, E.J. and Bennett, K.P. (2000) 'Multicategory classification by support vector machines', Proceedings of the Seventeenth International Conference on Machine Learning, Morgan Kaufmann, San Francisco, California, pp.57-64.
4. Dietterich, T.G. and Bakiri, G. (1991) 'Errorcorrecting output codes: a general method for improving multiclass inductive learning programs', in Dean, T.L. and McKeown, K. (Eds.): Proceedings of the Ninth AAAI National Conference on Artificial Intelligence, AAAI Press, Menlo Park, CA, pp.572-577.
5. Dietterich, T.G. and Bakiri, G. (1995) 'Solving multiclass learning problems via error-correcting output codes', Journal of Artificial Intelligence Research, Vol. 2, pp. 263-286.
6. Duan, K., Keerthi, S.S. and Chu, W. (2003) 'Multi-category classification by soft-max combination of binary classifiers'. In Multiple Classifier Systems, Lecture Notes in Computer Science. 11-13 June. Springer, Guilford, UK, Vol. 2709. pp. 125-134.
7. Durst, R., Champion, T., Wirten, B., Miller, E. and Spagnuolo, L. (1999) 'Testing and evaluating computer intrusion detection systems'. Communications of the ACM, Vol. 42, No, 7, pp.53-61.
8. Eskin, E., Arnold, A., Prerau, M., Portnoy, L. and Stolfo, S. (2002) 'A geometric framework for unsupervised anomaly detection: detecting intrusions in unlabeled data'. Barbará, D. and Jajodia, S. (Eds.): Applications of Data Mining in Computer Security, Advances in Information Security, Vol. 6, p.272.
9. Fine, S., Saon, G. and Gopinath, R.A. (2002) 'Digit recognition in noisy environments via a sequential gmm/svm system', In IEEE International Conference On Acoustics. Speech, and Signal Processing. May 13-17, Vol. 1. pp.1-49-1-52.
10. Furnkranz, J. (2001) 'Round robin rule learning'. Proceedings of the 18th International Conference on Machine Learning (ICML-01), pp.146-153.
11. Geleyn, E. (2002) Combining Decision Trees for Software Quality Classification: An Empirical Study, Master's thesis. Advised by Khoshgoftaar, T.M., May, Florida Atlantic University. Boca Raton. FL. USA.
12. Gomez, J. and Dasgupta, D. (2001) 'Evolving fuzzy classifiers for intrusion detection'. In Proceedings of the 2002 IEEE. Workshop on Information Assurance. June. United States Military Academy, West Point, NY.
13. Gomez, J., Dasgupta, D., Nasaroui, O. and Gonzalez, F. (2002) 'Complete expressions trees for evolving fuzzy classifier systems with genetic algorithms and application to network intrusion detection', In proceedings of the North American Fiery Information Processing Society, June, pp.63-78.
14. Hastie, T. and Tibshirani, R. (1998) 'Classification by pairwise coupling', Journal of The Annals of Statistics, Vol. 26, No. 2, pp.451-471.
15. Johnson, R.A. and Wichern, D.W. (1992) Applied Multivariate Statistical Analysis, 2nd ed., Prentice Hall. Englewood Cliffs, NJ, USA.
16. Khoshgoftaar, T.M. and Abushadi, M.E. (2004) 'Resource-sensitive intrusion detection models for network traffic'. Proceedings of the Eighth IEEE International Symposium on High Assurance Systems Engineering, 25-26 March. Tampa Florida, pp.249-258.
17. Khoshgoftaar, T.M. and Allen, E.B. (2000) 'A practical classificationrule for software quality models'. IEEE Transactions on Reliability, June, Vol. 49, No. 2, pp.209-216.
18. Khoshgoftaar, T.M., Allen, E.B. and Deng, J. (2002) 'Using regression trees to classify fault-prone software modules'. IEEE Transactions on Reliability, December. Vol. 51, No. 4, pp.455-462.
19. Khoshgoftaar, T.M., Gao, K. and Wang, Y. (2004) 'A comparative study of classification algorithms for network intrusion detection', in Pham. H. and Yamada, S. (Eds,): Proceedings of the 10th International Conference on Reliability and Quality in Design. 5-7 August. International Society of Science and Applied Technologies, Las Vegas, Nevada. USA. pp.168-172.
20. Klautau, A., Jevtic, N. and Orlitsky, A. (2002) 'Combined binary classifiers with applications to speech recognition'. In Seventh International Conference on Spoken Language Processing. 16-20 September. Denver. Colorado. USA, pp.2469-2472.
21. Lee, W., Park, C. and Stoflo, S. (1999a) 'Automated intrusion detection methods using NFR', Proceedings of the 1st USENIX Workshop on Intrusion Detection and Network Monitoring, 9-12th April, Santa Clara. California. USA, pp.63-72.
22. Lee, W., Stolfo, S. and Mok, K. (1999b) 'Mining in a data-ow environment: experience in network intrusion detection', in Chaudhuri, S. and Madigan, D. (Eds.): Proceedings of the Fifth International Conference on Knowledge Discovery and Data Mining (KDD-99). pp. 114-124.
23. Lee, W., Fan, W., Miller, M., Stolfo, S. and Zadok, E. (2002) 'Toward cost-sensitive modeling for intrusion detection and response'. Journal of Computer Security. Vol. 10, Nos. 1-2, pp.5-22.
24. Lin, H. (2004) Techniques for Combining Binary Classifiers: A Comparative Study in Network Intrusion Detection Systems. Master's Thesis, May. Advised by Khoshgoftaar, T.M., Florida Atlantic University, Boca Raton, FL. USA.
25. Lindqvist, U. and Porras, P. (1999) 'Detecting computer and network misuse through the production based expert system toolset (p-best)'. Proceedings of the 1999 IEEE Symposium on Security and Privacy. May. Oakland. IEEE Computer Society Press. Los Alamitos. California, pp.146-161.
26. Lippmann, R., Haines, J.W., Fried, D.J., Korba, J. and Das, K. (2000) 'The 1999 DARPA offline intrusion detection evaluation'. Computer Networks. Vol. 34, pp.579-595.
27. Lippmann, R.P. and Cunningham, R.K. (1999) Using Key-String Selection and Neural Networks to Reduce False Alarms and Detect New Attacks with Sniffer-Based Intrusion Detection Systems, in RAID 1999 Conference. West Lafayette, September, Indiana, pp.7-9.
28. Masulli, F. and Alentini, G. (2000) 'Effectiveness of error correcting output coding methods in ensemble", In Multiple Classifier Systems, Lecture Notes in Computer Science. 21-23 June, Springer, Cagliari, Italy, Vol. 1857, pp.107-116.
29. McHugh, J. (2000) 'Testing intrusion detection systems: a critique of the 1998 and 1999 DARPA intrusion detection system evaluations as performed by Lincoln Laboratory'. ACM Transactions on Information and System Security, Vol. 3, No. 4. November, pp.262-294.
30. Mukkamala, S. and Sung, A.M. (2002) 'Performance based feature identification for intrusion detection using support vector machines'. The Second International Conference on Hybrid Intelligent Systems. Santiago. Chile. 01-04 December, pp.351-364
31. Pfahringer, B. (2000) 'Winning the kdd99 classification cup: bagged boosting'. ACM SIGKDD Explorations Newsletter, Vol. 1, No. 2, pp.65, 66.
32. Portnoy, L., Eskin, E. and Stolfo, S.J. (2001) 'Intrusion detection with unlabeled data using clustering', In Proceedings of ACM CSS Workshop on Data Mining Applied to Security (DMSA- 2001), 5-8 November, Philadelphia, PA. pp.51-62.
33. Quinlan, R.J. (1987) 'Simplifying decision trees'. International Journal of Man-Machine Studies, Special Issue: Knowledge Acquisition for Knowledge-based Systems. Part 5. December, Vol. 27, No. 3, pp.221-234.
34. Sejnowski, T.J. and Rosenberg, C.R. (1987) 'Parallel networks that learn to pronounce English text', Journal of Complex Systems, Vol. 1, pp. 145-168.
35. Smith, N. and Gales, M. (2001) 'Speech recognition using SVMs', in Dietterich, T.G., Becker, S. and Ghahramani, Z. (Eds.): Advances in Neural Information Processing Systems 14 Proceedings of the 2001 Neural Information Processing Systems (Nips) Conference, December, Vancouver, British Columbia, Canada.
36. Stolfo, S.J., Fan, W. and Lee, W. (2000) 'Cost-based modeling for fraud and intrusion detection: results from the JAM project', Proceedings of the 2000 DARPA Information Survivability Conference and Exposition, 25th-27th January, Hilton Head, South Carolina, Vol. 2, pp.1130-1144.
37. Wirten, I.H. and Frank, E. (2005) Data Mining: Practical Machine Learning Tools and Techniques, 2nd ed., Morgan Kaufmann, June 2005.