Selecting features for intrusion detection: A feature relevance analysis on KDD 99 intrusion detection datasets

PST 2005 - 3rd Annual Conference on Privacy, Security and Trust, Conference Proceedings

Volumn , Issue , 2005, Pages

  Kayacik, H Güneş ^a   Zincir Heywood, A Nur ^a   Heywood, Malcolm I ^a  

^a DALHOUSIE UNIVERSITY   (Canada)

Author keywords

Feature relevance; Information gain; Intrusion detection; KDD 99 intrusion detection datasets

Indexed keywords

DETECTION RATES; FALSE POSITIVE RATES; FEATURE RELEVANCE; INFORMATION GAIN; KDD 99 INTRUSION DETECTION DATASETS; LABELED DATA; LABELED DATASET; TRAINING DATA;

LEARNING SYSTEMS;

INTRUSION DETECTION;

EID: 84883271942     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: None     Document Type: Conference Paper

References (13)

1. The 1998 intrusion detection off-line evaluation plan. MIT Lincoln Lab., Information Systems Technology Group. http://www.11.mit.edu/IST/ideval/docs/ 1998/id98-eval-11.txt, 25 March 1998.
2. Knowledge discovery in databases DARPA archive. Task Description. http://www.kdd.ics.uci.edu/databases/kddcup99/task.html.
3. J. McHugh, "Testing intrusion detection systems: A critique of the 1998 and 1999 DARPA intrusion detection system evaluations as performed by Lincoln Laboratory, " ACM Transactions on Information and System Security, 3(4), pp. 262-294, 2001.
4. Pfahringer B. Winning the KDD99 Classification Cup: Bagged Boosting. SIGKDD Explorations, 1(2):65-66, 2000.
5. Levin I. KDD-99 Classifier Learning Contest: LLSoft's Results Overview. SIGKDD Explorations, 1(2):67-75, 2000.
6. Kayacik G., Zincir-Heywood N., and Heywood M. On the Capability of an SOM based Intrusion Detection System. In Proceedings of International Joint Conference on Neural Networks, 2003.
7. Paxson V., "Bro: A System for Detecting Network Intruders in Real-Time", Computer Networks, 31(23-24), pp. 2435-2463, 14 Dec. 1999.
8. S. Hettich, S.D. Bay, The UCI KDD Archive. Irvine, CA: University of California, Department of Information and Computer Science, http://kdd.ics.uci. edu, 1999.
9. Han J., Kamber M., "Data Mining: Concepts and Techniques", Morgan Kaufmann, 2000, ISBN 7-04-010041, Ch. 5.
10. Sabhnani M., Serpen G., "Why Machine Learning Algorithms Fail in Misuse Detection on KDD Intrusion Detection Data Set", In Journal of Intelligent Data Analysis, 2004.
11. E. Eskin, A. Arnold, M. Prerau, L. Portnoy, S. Stolfo, "A geometric framework for unsupervised anomaly detection: Detecting intrusions in unlabeled data, " in Applications of Data Mining in Computer Security, Chapter 4, D. Barbara and S. Jajodia (editors), Kluwer, ISBN 1-4020-7054-3, 2002.
12. Kayacik, G. H., Zincir-Heywood, A. N., "Analysis of Three Intrusion Detection System Benchmark Datasets Using Machine Learning Algorithms", Proceedings of the IEEE ISI 2005 Atlanta, USA, May 2005.
13. Wong, A. K. C., and Chiu, D. K. Y., "Synthesizing statistical knowledge from incomplete mixed-mode data", IEEE Transactions on Pattern Analysis and Machine Intelligence, vPAMI-9, no. 6, pp.796-805, November 1987.