Decision tree classifier for network intrusion detection with GA-based feature selection

Proceedings of the Annual Southeast Conference

Volumn 2, Issue , 2005, Pages 2136-2141

  Stein, Gary ^a   Chen, Bing ^a   Wu, Annie S ^a   Hua, Kien A ^a  

^a UNIVERSITY OF CENTRAL FLORIDA   (United States)

Author keywords

Decision trees; Genetic algorithm; Intrusion detection

Indexed keywords

DATA SETS; DECISION TREE CLASSIFIERS; DETECTION RATES; FALSE ALARM RATE; FEATURE SELECTION; HIGH DIMENSION FEATURE SPACE; IN-NETWORK; INPUT DATAS; INPUT FEATURES; MACHINE LEARNING TECHNIQUES; NETWORK INTRUSION DETECTION; TRAINING DATA;

CLASSIFIERS; DECISION TREES; FEATURE EXTRACTION; GENETIC ALGORITHMS; LEARNING ALGORITHMS; LEARNING SYSTEMS; MACHINERY; STATISTICAL TESTS;

INTRUSION DETECTION;

EID: 77953759247     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/1167253.1167288     Document Type: Conference Paper

References (27)

1. Amor, N. B., Benferhat, S., and Elouedi, Z. Naive Bayes vs decision trees in intrusion detection systems. In Proc. 2004 ACM Symp. on Applied Computing. pp. 420-424, 2004.
2. st Int'l Conf. On Genetic Algorithms. Pg 101-111, 1985.
3. Balthrop, J., Esponda, F., Forrest, S., and Glickman, M. Coverage and generalization in an artificial immune system. In Proc. Genetic and Evolutionary Computation Conference. (GECCO), pp. 3-10, 2002.
4. Botha, M., Solms, R. V., Perry, K., Loubser, E., and Yamoyany, G. The utilization of artificial intelligence in a hybrid intrusion detection system. In Proceedings of SAICSIT 2002, pp. 149-155, 2002.
5. Crosbie, M., and Spafford, G. Applying genetic programming to intrusion detection. In Proc.1995 AAAI Symposium on Genetic Programming, pp. 1-8.
6. Dasgupta, D., and Gonzalez, F. A. An intelligent decision support system for intrusion detection and response. In Proc. Int'l Workshop on Mathematical Methods, Models and Arch. For Computer Networks Security, pp. 1-14, 2001.
7. Gartner, T., and Flach, P. A. WBCsvm: Weighted Bayesian Classification based on support vector machine. In Proc. 18th International Conference on Machine Learning (ICML-2001), pp. 156-161.
8. Ghosh, A., and Schwartzbard, A. A study in using neural networks for anomaly and misuse Detection. 8th USENIX Security Symposium, pp. 141-151, 1999.
9. Holland, J. H. (1975). Adaptation in natural and artificial systems. University of Michigan Press (reprinted in 1992 by MIT Press, Cambridge, MA).
10. Huang, Z., Pei, M., Goodman, E., Huang, Y., and Li, G. Genetic algorithm optimized feature transformation: a comparison with different classifiers. In Proc. GECCO 2003, pp. 2121-2133.
11. KDDCUP 1999 http://kdd.ics.uci.edu/databases/kddcup99/kddcup99.html.
12. Kohavi, R., and John, G. Automatic parameter selection by minimizing estimated error. In Proc. Machine Learning (ICML-95), 1995.
13. Kohavi, R., and John, G. The wrapper approach. In Motoda, H., and Liu, H. (eds.), Feature Extraction, Construction and Selection: A Data Mining Perspective. Kluwer Academic Publishers, July 1998.
14. Kruegel, C., and Toth, T. Using decision trees to improve signature-based intrusion detection. In Proc. Int'l Symp. Recent Advances in Intrusion Detection, 2003.
15. Levin, I. KDD-99 classifier learning contest LLSoft's results overview. SIGKDD Explorations, 2000 ACM SIGKDD. 1 (2), pp. 67-75. January 2000.
16. Li, W. Using Genetic Algorithm for network intrusion detection. In Proc. United States Department of Energy Cyber Security Group 2004 Training Conference, Kansas City, Kansas, May 24-27, 2004.
17. Li, X., and Ye, N. Decision tree classifier for computer intrusion detection. Journal of Parallel and Distributed Computing Practices, 4(2), pp. 179-190, 2001.
18. Liao, Y., and Vemuri, V. R. Using text categorization techniques for intrusion detection. In Proc. of 11th USENIX Security Symposium, San Francisco, California, USA, August 5-9, 2002.
19. Lu, W., and Traore, I. Detecting new forms of network intrusion using genetic programming. Computational Intelligence, 20(3), 2004, pp. 475-494.
20. Pei, M., Goodman, E. D., and Punch, W. F. Feature extraction using genetic algorithms. In Proc. Int'l Symp. on Intelligent Data Engineering and Learning'98. pp. 371-384.
21. Pfahringer, B. Winning the KDD99 Classification Cup: Bagged boosting. SIGKDD Explorations, 2000 ACM SIGKDD. 1(2), pp. 65-66, January 2000.
22. Punch, W.F., Goodman, E.D., Pei, M., Chia-Shun, L., Hovland, P., and Enbody, R. Further research on feature selection and classification using genetic algorithms. In Proc. 5th Int'l Conf. Genetic Algorithms. pp. 557, July 1993.
23. Quinlan, J. R. (1993). C4.5, Programs for Machine Learning. Morgan Kaufmann San Mateo Ca, 1993.
24. Sinclair, C., Pierce, L., and Matzner, S. An application of machine learning to network intrusion detection. In Proc. 1999 Ann. Comp. Security Application Conf., pp 371-377.
25. Sung, A. H., and Mukkamala, S. Identifying important features for intrusion detection using support vector machines and neural networks. In Proceedings of the 2003 Symposium on Applications and the Internet. pp. 209-216.
26. Valdes, A., Skinner K. Adaptive model-based monitoring for cyber attack detection. In Proc. of Recent Advances in Intrusion Detection. pp. 80-92, 2000.
27. Vladimir, M., Alexei, V., and Ivan, S. The MP13 approach to the KDD'99 classifier learning contest. SIGKDD Explorations, 2000 ACM SIGKDD. 1(2), pp. 76-77. January 2000.