Modeling network intrusion detection system using feature selection and parameters optimization

IEICE Transactions on Information and Systems

Volumn E91-D, Issue 4, 2008, Pages 1050-1057

  Kim, Dong Seong ^a   Park, Jong Sou ^a  

^a Hankuk Aviation University   (South Korea)

Author keywords

Feature selection; Filter method; Genetic algorithm; Intrusion detection system; Network security; Parameters optimization; Random forest; Support vector machines

Indexed keywords

CLUSTERING ALGORITHMS; COMPUTER CRIME; DECISION TREES; GENETIC ALGORITHMS; INTRUSION DETECTION; MERCURY (METAL); NETWORK SECURITY; OPTIMIZATION; PARAMETER ESTIMATION; SUPPORT VECTOR MACHINES;

COMPUTATIONAL OVERHEADS; FILTER METHOD; GENETIC OPERATIONS; HYBRID FEATURE SELECTIONS; IMPORTANT FEATURES; INTRUSION DETECTION SYSTEMS; PARAMETERS OPTIMIZATION; RANDOM FORESTS;

FEATURE EXTRACTION;

EID: 68149099646     PISSN: 09168532     EISSN: 17451361     Source Type: Journal    
DOI: 10.1093/ietisy/e91-d.4.1050     Document Type: Article

References (34)

1. D. Ourston, S. Matzner,W. Stump, and B. Hopkins, "Applications of hidden Markov models to detect multi-stage network attacks," Proc. 36th Hawaii Int. Conf. on System Sciences, p.334, 2003.
2. M.A. Hall, "Correlation-based feature selection for discrete and numeric class machine learning," Proc. 17th Int'l Conf. on Machine Learning, pp.359-366, 2000.
3. M. Dash, H. Liu, and H. Motoda, "Consistency based feature selection," Proc. Fourth Pacific Asia Conf. on Knowledge Discovery and Data Mining (PAKDD), pp.98-109, Kyoto, Japan, 2000.
4. H. Almuallim and T.G. Dietterich, "Learning Boolean concepts in the presence of many irrelevant features," Artif. Intell., vol.69, nos.1-2, pp.279-305, 1994.
5. J.H. Holland, Adaptation in Natural and Artificial Systems, University of Michigan Press, Ann Arbor, 1975.
6. M. Fugate and J.R. Gattiker, "Anomaly detection enhanced classification in computer intrusion detection," Lecture Notes in Computer Science, vol.2388, Springer-Verlag, Berlin Heidelberg, 2002.
7. B. Nguyen, "An application of support vector machines to anomaly detection," Research in Computer Science-Support Vector Machine, Report, Fall 2002.
8. W. Hu, Y. Liao, and V. Vemuri, "Robust support vector machines for anomaly detection in computer security," Proc. Int. Conf. on Machine Learning and Applications 2003, pp.168-174, CSREA Press, 2003.
9. J. Cannady, "Artificial neural network for misuse detection," Proc. 1998 National Information System Security Conf., pp.443-456, Arlington, Oct. 1998.
10. O. Chapelle, V. Vapnik, O. Bousquet, and S. Mukherjee, "Choosing multiple parameters for support vector machines," Machine Learning Journal, vol.46, pp.131-159, 2002.
11. K. Duan, S.S. Keerthi, and A.N. Poo, "Evaluation of simple performance measures for tuning SVM hyperparameters," Neurocomputing, vol.51, pp.41-59, 2003.
12. KDD Cup 1999 Data, http://kdd.ics.uci.edu/databases/kddcup99/kddcup99. html
13. Open SourceWEKA Project, http://www.cs.waikato.ac.nz/ml/weka/index.html
14. H. Liu and L. Yu, "Toward integrating feature selection algorithms for classification and clustering," IEEE Trans. Knowl. Data Eng., vol.17, no.3, pp.1-12, 2005.
15. A.H. Sung and S. Mukkamala, "Identifying important features for intrusion detection using support vector machines and neural networks," Proc. 2003 Int. Symposium on Applications and the Internet Technology, pp.209-216, IEEE Computer Society Press, 2003.
16. D. Kim, H.-N. Nguyen, S.-Y. Ohn, and J. Park, "Fusions of GA and SVM for anomaly detection in intrusion detection system," Lecture Notes in Computer Science, vol.3498, pp.415-420, Springer Verlag, 2005.
17. V. Vapnik, The Nature of Statistical Learning Theory, Springer, Berlin Heidelberg, New York, 1995.
18. U. Fayyad and K. Irani, "Multi-interval discretization of continuous attributes as pre-processing for classification learning," Proc. 13th Int. Join Conf. on Artificial Intelligence, pp.1022-1027, 1993.
19. W.H. Press, B.P. Flannery, S.A. Teukolsky, and W.T. Vetterling, Numerical recipes in C, Cambridge University Press, Cambridge, 1988.
20. S. Chebrolu, A. Abraham, and J.P. Thomas, "Data reduction and data classification in an intrusion detection system," Proc. South Central Information Security Symposium, Texas, USA, 2004.
21. M. Sabhnani and G. Serpen, "On failure of machine learning algorithms for detecting misuse in KDD intrusion detection data set," Journal of Intelligent Data Analysis, vol.8, no.4, pp.403-415, 2004.
22. D.E. Goldberg, Genetic Algorithms in Search, Optimization & Machine Learning, Addison Wesley, 1989.
23. M. Mitchell, Introduction to genetic Algorithms, 5th printing, MIT Press, 1999.
24. Z. Michalewicz, Genetic Algorithms + Data structures = Evolution Programs, 3 re rev. and extended ed., Springer-Verlag, 1996.
25. N. Cristianini and J.S. Taylor, An introduction to support vector machines and other kernel-based learning methods, Cambridge University Press, 2000.
26. R.O. Duda, P.E. Hart, and D.G. Stork, Pattern Classification, 2nd ed., Wiley Interscience Inc., 2001.
27. T. Joachims, "Making large-scale SVM learning practical," in Advances in Kernel Methods - Support Vector Learning, ed. B. Scholkopf, C. Burges, and A. Smola, chapter 11, MIT Press, 1999.
28. M. Fugate and J.R. Gattiker, "Anomaly detection enhanced classification in computer intrusion detection," LANL Tech Report, LAUR-02-1149, 2002.
29. D. Kim and J. Park, "Network-based intrusion detection with support vector machines," ICOIN 2003, Lecture Notes in Computer Science, vol.2662, Springer-Verlag, 2003.
30. S. Mukkamala, G. Janoski, and A. Sung, "Intrusion detection using neural networks and support vector machines," Proc. IEEE Int. Joint Conf. on Neural Networks, pp.1702-1707, 2002.
31. B. Rylander, Computational Complexity and the Genetic Algorithm, Ph.D. Thesis, University of Idaho, 2001.
32. L. Breiman, "Random forest," Mach. Learn., vol.45, pp.5-32, 2001.
33. L. Breiman, J.H. Friedman, R.A. Olshen, and C.J. Stone, Classification and Regression Trees, Chapman and Hall, New York, 1984.
34. The R Project for Statistical Computing, http://www.r-project.org/