Evolving statistical rulesets for network intrusion detection

Applied Soft Computing Journal

Volumn 33, Issue , 2015, Pages 348-359

  Rastegari, Samaneh ^a   Hingston, Philip ^a   Lam, Chiou Peng ^a  

^a EDITH COWAN UNIVERSITY   (Australia)

Author keywords

DARPA; Genetic algorithm; Interval rule based; Intrusion detection; NSL KDD

Indexed keywords

ALGORITHMS; ARTIFICIAL INTELLIGENCE; COMPLEX NETWORKS; DENIAL-OF-SERVICE ATTACK; GENETIC ALGORITHMS; HUMAN COMPUTER INTERACTION; LEARNING SYSTEMS; NETWORK SECURITY;

DARPA; DETECTION PERFORMANCE; LINCOLN LABORATORY; MACHINE LEARNING TECHNIQUES; NETWORK INTRUSION DETECTION; NETWORK INTRUSIONS; NSL-KDD; RULE BASED;

INTRUSION DETECTION;

EID: 84929620760     PISSN: 15684946     EISSN: None     Source Type: Journal    
DOI: 10.1016/j.asoc.2015.04.041     Document Type: Article

References (48)

1. E.H. Spafford, and D. Zamboni Intrusion detection using autonomous agents Comput. Netw. 34 4 2000 547 570
2. S.X. Wu, and W. Banzhaf The use of computational intelligence in intrusion detection systems: a review Appl. Soft Comput. 10 1 2010 1 35
3. P. Garcia-Teodoro, J. Diaz-Verdejo, G. Maciá-Fernández, and E. Vázquez Anomaly-based network intrusion detection: techniques systems and challenges Comput. Secur. 28 1 2009 18 28
4. C.-F. Tsai, Y.-F. Hsu, C.-Y. Lin, and W.-Y. Lin Intrusion detection by machine learning: a review Expert Syst. Appl. 36 10 2009 11994 12000
5. G. Kumar, K. Kumar, and M. Sachdeva The use of artificial intelligence based techniques for intrusion detection: a review Artif. Intell. Rev. 34 4 2010 369 387
6. V. Dhar, D. Chou, and F. Provost Discovering interesting patterns for investment decision making with GLOWER: a genetic learner overlaid with entropy reduction Data Min. Knowl. Discov. 4 4 2000 251 280
7. L. Feinstein, D. Schnackenberg, R. Balupari, and D. Kindred Statistical approaches to DDoS attack detection and response DARPA Information Survivability Conference and Exposition, 2003. IEEE Proceedings, vol. 1 2003 303 314
8. J. Bacardit, and J.M. Garrell Evolving multiple discretizations with adaptive intervals for a Pittsburgh rule-based learning classifier system Genetic and Evolutionary Computation-GECCO 2003 2003 Springer 1818 1831
9. J. Bacardit, and N. Krasnogor Performance and efficiency of memetic Pittsburgh learning classifier systems Evol. comput. 17 3 2009 307 342
10. M. Tavallaee, E. Bagheri, W. Lu, and A.-A. Ghorbani A detailed analysis of the KDD CUP 99 data set Proceedings of the Second IEEE Symposium on Computational Intelligence for Security and Defence Applications 2009
11. KDD99, http://kdd.ccs.uci.edu/databases/kddcup99/task.html.
12. R. Sommer, and V. Paxson Outside the closed world: On using machine learning for network intrusion detection 2010 IEEE Symposium on Security and Privacy (SP), IEEE 2010 305 316
13. MIT Lincoln Laboratory Datasets, DARPA dataset 2000 http://www.ll.mit.edu/ideval/data/2000data.html.
14. CAIDA, http://www.caida.org/data/passive/ddos-20070804-dataset.xml.
15. S. Bhatia, G. Mohay, A. Tickle, and E. Ahmed Parametric differences between a real-world distributed denial-of-service attack and a flash event 2011 Sixth International Conference on Availability, Reliability and Security (ARES), IEEE 2011 210 217
16. Y. Xiang, K. Li, and W. Zhou Low-rate DDoS attacks detection and traceback by using new information metrics IEEE Trans. Inform. Forensics Secur. 6 2 2011 426 437
17. M.H. Bhuyan, D. Bhattacharyya, and J. Kalita Information metrics for low-rate DDoS attack detection: A comparative evaluation 2014 Seventh International Conference on Contemporary Computing (IC3), IEEE 2014 80 84
18. W.W. Cohen Fast effective rule induction Proceedings of the Twelfth International Conference on Machine Learning 1995 Morgan Kaufmann 115 123
19. W. Lee, S.J. Stolfo, and K.W. Mok A data mining framework for building intrusion detection models Proceedings of the 1999 IEEE Symposium on Security and Privacy, IEEE 1999 120 132
20. W. Lee, and S.J. Stolfo A framework for constructing features and models for intrusion detection systems ACM Trans. Inform. Syst. Secur. 3 4 2000 227 261
21. K. Shafi, and H.A. Abbass Evaluation of an adaptive genetic-based signature extraction system for network intrusion detection Pattern Anal. Appl. 16 4 2013 549 566
22. W. Li Using genetic algorithm for network intrusion detection Proceedings of the United States Department of Energy Cyber Security Group 2004 1 8
23. M.V. Fidelis, H. Lopes, and A. Freitas Discovering comprehensible classification rules with a genetic algorithm Proceedings of the 2000 Congress on Evolutionary Computation, vol. 1, IEEE 2000 805 810
24. D.E. Goldberg Genetic Algorithms in Search, Optimization, and Machine Learning, vol. 412 1989 Addison-Wesley Reading Menlo Park
25. C.R. Reeves, and J.E. Rowe Genetic Algorithms: Principles and Perspectives: A Guide to GA Theory, vol. 20 2003 Springer
26. R.H. Gong, M. Zulkernine, and P. Abolmaesumi A software implementation of a genetic algorithm based approach to network intrusion detection 2005 and First ACIS International Workshop on Self-Assembling Wireless Networks on Software Engineering, Sixth International Conference on Artificial Intelligence, Networking and Parallel/Distributed Computing, IEEE, SNPD/SAWN 2005 2005 246 253
27. MIT Lincoln Laboratory DARPA Dataset 2015 http://www.ll.mit.edu/mission/communications/cyber/CSTcorpora/ideval/data/index.html
28. W. Lu, and I. Traore Detecting new forms of network intrusion using genetic programming Comput. Intell. 20 3 2004 475 494
29. F. Hoffmann Combining boosting and evolutionary algorithms for learning of fuzzy classification rules Fuzzy Sets Syst. 141 1 2004 47 58
30. J.H. Holland, L.B. Booker, M. Colombetti, M. Dorigo, D.E. Goldberg, S. Forrest, R.L. Riolo, R.E. Smith, P.L. Lanzi, and W. Stolzmann What is a learning classifier system? Learning Classifier Systems 2000 Springer 3 32
31. K. Shafi, and H.A. Abbass An adaptive genetic-based signature learning system for intrusion detection Expert Syst. Appl. 36 10 2009 12036 12043
32. J. Bacardit, and J.M. Garrell Bloat control and generalization pressure using the minimum description length principle for a Pittsburgh approach learning classifier system Learning Classifier Systems 2007 Springer 59 79
33. M.A. Akbar, and M. Farooq Application of evolutionary algorithms in detection of sip based flooding attacks Proceedings of the 11th Annual conference on Genetic and evolutionary computation, ACM 2009 1419 1426
34. S.W. Wilson Get real! XCS with continuous-valued inputs Learning Classifier Systems 2000 Springer 209 219
35. H. Hou, and G. Dozier Immunity-based intrusion detection system design, vulnerability analysis, and GENERTIA's genetic arms race Proceedings of the 2005 ACM Symposium on Applied Computing 2005 ACM 952 956
36. R.S. Hine, and E. Martin Oxford Dictionary of Biology 2004
37. D. Ashlock, and W. Ashlock Impact of regulatory genes on optimization behavior 2012 IEEE Congress on Evolutionary Computation (CEC) 2012 1 8 10.1109/CEC.2012.6252981
38. M. Kubat, and S. Matwin Addressing the curse of imbalanced training sets: one-sided selection, vol. 97 ICML Nashville, USA 1997 179 186
39. S. Garcí a, and F. Herrera Evolutionary undersampling for classification with imbalanced datasets: Proposals and taxonomy Evol. Comput. 17 3 2009 275 306
40. R. Barandela, J.S. Sánchez, V. GarcIa, and E. Rangel Strategies for learning in class imbalance problems Pattern Recogn. 36 3 2003 849 851
41. I.H. Witten, E. Frank, L.E. Trigg, M.A. Hall, G. Holmes, and S.J. Cunningham Weka: Practical Machine Learning Tools and Techniques with Java Implementations 1999
42. J. Alcala-Fdez, L. Sanchez, S. Garcia, M.J. del Jesus, S. Ventura, J. Garrell, J. Otero, C. Romero, J. Bacardit, and V.M. Rivas KEEL: a software tool to assess evolutionary algorithms for data mining problems Soft Comput. 13 3 2009 307 318
43. S. Mukherjee, and N. Sharma Intrusion detection using naive Bayes classifier with feature reduction Proc. Technol. 4 2012 119 128
44. K.-C. Khor, C.-Y. Ting, and S.-P. Amnuaisuk Forming an optimal feature set for classifying network intrusions involving multiple feature selection methods 2010 International Conference on Information Retrieval & Knowledge Management (CAMP), IEEE 2010 179 183
45. C.E. Shannon A mathematical theory of communication ACM SIGMOBILE Mobile Comput. Commun. Rev. 5 1 2001 3 55
46. J. Zhang, Z. Qin, L. Ou, P. Jiang, J. Liu, and A. Liu An advanced entropy-based DDOS detection scheme 2010 International Conference on Information Networking and Automation (ICINA) Vol. 2, IEEE 2010 V2 67
47. L. Zi, J. Yearwood, and X.-W. Wu Adaptive clustering with feature ranking for DDoS attacks detection 2010 4th International Conference on Network and System Security (NSS) IEEE 2010 281 286
48. M.H. Sqalli, S.N. Firdous, Z. Baig, and F. Azzedin An entropy and volume-based approach for identifying malicious activities in honeynet traffic 2011 International Conference on Cyberworlds (CW), IEEE 2011 23 30