Ensemble-based multi-filter feature selection method for DDoS detection in cloud computing

Eurasip Journal on Wireless Communications and Networking

Volumn 2016, Issue 1, 2016, Pages

  Osanaiye, Opeyemi ^a,b   Cai, Haibin ^c   Choo, Kim Kwang Raymond ^b   Dehghantanha, Ali ^d   Xu, Zheng ^e,f   Dlodlo, Mqhele ^a  

^a UNIVERSITY OF CAPE TOWN   (South Africa)

^b UNIVERSITY OF SOUTH AUSTRALIA   (Australia)

^c EAST CHINA NORMAL UNIVERSITY   (China)

^d UNIVERSITY OF SALFORD   (United Kingdom)

^e TSINGHUA UNIVERSITY   (China)

^f INSTITUTE OF FORENSIC SCIENCE   (China)

Author keywords

Cloud DDoS; Ensemble based multi filter feature selection method; Filter methods; Intrusion detection system; Machining learning

Indexed keywords

BANDPASS FILTERS; CLASSIFICATION (OF INFORMATION); CLOUD COMPUTING; DECISION TREES; DENIAL-OF-SERVICE ATTACK; INTRUSION DETECTION; MERCURY (METAL); NETWORK SECURITY;

CLASSIFICATION ACCURACY; CLASSIFICATION TECHNIQUE; DECISION TREE CLASSIFIERS; DISTRIBUTED DENIAL OF SERVICE ATTACK; EXPERIMENTAL EVALUATION; FEATURE SELECTION METHODS; FILTER METHOD; INTRUSION DETECTION SYSTEMS;

FEATURE EXTRACTION;

EID: 84969794985     PISSN: 16871472     EISSN: 16871499     Source Type: Journal    
DOI: 10.1186/s13638-016-0623-3     Document Type: Article

References (45)

1. O Osanaiye, M Dlodlo, Proceedings of 16th International Conference on Computer as a Tool (EUROCON), in TCP/IP header classification for detecting spoofed DDoS attack in Cloud environment (IEEE, Salamanca, 2015), pp. 1–6
2. O Osanaiye, Proceedings of 18th International Conference on Intelligence in Next Generation Networks (ICIN), in Short Paper: IP spoofing detection for preventing DDoS attack in Cloud Computing (IEEE, Paris, 2015), pp. 139–141
3. C Esposito, M Ficco, F Palmieri, A Castiglione, Interconnecting federated clouds by using publish-subscribe service. Cluster comput 16(4), 887–903 (2013)
4. S Shamshirband, NB Anuar, ML Kiah, VA Rohani, D Petković, S Misra, AN Khan, Co-FAIS: cooperative fuzzy artificial immune system for detecting intrusion in wireless sensor networks. J Netw Comput Appl 42, 102–117 (2014)
5. S Shamshirband, A Patel, NB Anuar, MLM Kiah, A Abraham, Cooperative game theoretic approach using fuzzy Q-learning for detecting and preventing intrusions in wireless sensor networks. Eng Appl Artif Intell 32, 228–241 (2014)
6. O Osanaiye, K-KR Choo, M Dlodlo, Distributed denial of service (DDoS) resilience in cloud: review and conceptual cloud DDoS mitigation framework. J. Netw. Comput. Appl 67, 147–65 (2016)
7. M Ficco, M Rak, Stealthy denial of service strategy in cloud computing. IEEE Trans Cloud Comput 3(1), 80–94 (2015)
8. AN Khan, MM Kiah, SA Madani, M Ali, S Shamshirband, Incremental proxy re-encryption scheme for mobile cloud computing environment. J Supercomput 68(2), 624–651 (2014)
9. L Krämer, J Krupp, D Makita, T Nishizoe, T Koide, K Yoshioka, C Rossow, Proceedings of 18th International Symposium on Research in Attacks Intrusion and Defenses (RAID). AmpPot: monitoring and defending against amplification DDoS attacks (Springer, Kyoto, 2015), pp. 615–636
10. L Zhao, L Chen, R Ranjan, K-K R Choo and J He, Geographical information system parallelization for spatial big data processing: a review. Cluster Comput. (Springer, 2015 in press)
11. D Quick, K-KR Choo, Impacts of increasing volume of digital forensic data: a survey and future research challenges. Digit Investig 11(4), 273–294 (2014)
12. Z Xu, Y Liu, N Yen, L Mei, X Luo, X Wei, C Hu, Crowdsourcing based description of urban emergency events using social media big data. IEEE Trans Cloud Comput (2016) DOI: 10.1109/TCC.2016.2517638.
13. Z Xu, H Zhang, V Sugumaran, K-KR Choo, L Mei, Y Zhu, Participatory sensing-based semantic and spatial analysis of urban emergency events using mobile social media. EURASIP J Wirel Commun Netw 1, 1–9 (2016)
14. J Peng, K-K R Choo, H Ashman, Bit-level n-gram based forensic authorship analysis on social media: Identifying individuals from linguistic profiles. J Netw Comput Appl. (Elsevier, 2016 in press)
15. P Bermejo, L de la Ossa, J Gámez, J Puerta, Fast wrapper feature subset selection in high-dimensional datasets by means of filter re-ranking. Knowl-Based Syst 25(1), 35–44 (2012)
16. Y Chen, Y Li, X Cheng, L Guo, Proceedings of the 2nd SKLOIS Conference Information Security and Cryptology (INSCRYPT), in Survey and taxonomy of feature selection algorithms in intrusion detection system (Springer, Beijing, 2006), pp. 153–167
17. W Wang, Y He, J Liu, S Gombault, Constructing important features from massive network traffic for lightweight intrusion detection. IET Inform Secur 9(6), 374–379 (2015)
18. V Bolon-Canedo, N Sanchez-Marono, A Alonso-Betanzos, Feature selection and classification in multiple class datasets: an application to KDD Cup 99 dataset. Expert Syst Appl 38(5), 5947–5957 (2011)
19. Data mining software in Java. http://www.cs.waikato.ac.nz/ml/weka/(Last accessed 7 February 2016)
20. L Koc, T Mazzuchi, S Sarkani, A network intrusion detection system based on a Hidden Naïve Bayes multiclass classifier. Expert Syst Appl 39(18), 13492–13500 (2012)
21. W Wang, S Gombault, W Wang, S Gombault, Proceedings of the 3rd International conference on Risks and Security of Internet and Systems (CRiSIS’08), in Efficient detection of DDoS attacks with important attributes (IEEE, Tozeur, 2008), pp. 61–67
22. Z Baig, S Sait, A Shaheen, GMDH-based networks for intelligent intrusion detection. Eng Appl Artif Intel 26(7), 1731–1740 (2013)
23. S Lin, K Ying, C Lee, Z Lee, An intelligent algorithm with feature selection and decision rules applied to anomaly intrusion detection. Appl Soft Comput 12(10), 3285–3290 (2012)
24. Y Li, J Xia, S Zhang, J Yan, X Ai, K Dai, An efficient intrusion detection system based on support vector machines and gradually feature removal method. Expert Syst Appl 39(1), 424–430 (2012)
25. S Sindhu, S Geetha, A Kannan, Decision tree based light weight intrusion detection using a wrapper approach. Expert Syst Appl 39(1), 129–141 (2012)
26. F Zhang, D Wang, Proceedings of the 8th International Conference on Networking, Architecture and Storage (NAS), in An effective feature selection approach for network intrusion detection (IEEE, Xi’an, 2013), pp. 307–311
27. S Bhattacharya, S Selvakumar, Multi-measure multi-weight ranking approach for the identification of the network features for the detection of DoS and Probe attacks. Compt. J. 1-21 (2015)
28. A Olusola, A Oladele, D Abosede, in Proceedings of the World Congress on Engineering and Computer Science. Analysis of KDD’99 intrusion detection dataset for selection of relevance features (San Francisco, USA, 2010), pp.1-7. http://www.iaeng.org/publication/WCECS2010/WCECS2010_pp162-168.pdf
29. N Sengupta, J Sen, J Sil, M Saha, Designing of on line intrusion detection system using rough set theory and Q-learning algorithm. Neurocomputing 111, 161–168 (2013)
30. G Geng, N Li, S Gong, The Proceedings of International Conference on Industrial Control and Electronics Engineering (ICICEE), in Feature Selection Method for Network Intrusion Based on Fast Attribute Reduction of Rough Set (IEEE, Xi’an, 2012), pp. 530–534
31. B Agarwal, N Mittal, Proceedings of 14th International Conference on Computational Linguistics and Intelligent Text Processing (CICLing). Optimal feature selection for sentiment analysis (Springer, Samos, Greece, 2013), pp. 13–24
32. A Tesfahun, D Bhaskari, Proceedings of the International Conference on Cloud & Ubiquitous Computing & Emerging Technologies (CUBE), in Intrusion Detection using Random Forests Classifier with SMOTE and Feature Reduction (IEEE, Pune, 2013), pp. 127–132
33. L Yu, H Liu, Proceedings of the Twentieth International Conference on Machine Learning (ICML-2003). Feature selection for high-dimensional data: A fast correlation-based filter solution (Springer, Washington DC, 2003), pp. 856–863
34. H Ibrahim, S Badr, M Shaheen, Adaptive layered approach using machine learning techniques with gain ratio for intrusion detection systems. Int J Comput Appl 56(7), 10–16 (2012)
35. L Devi, P Subathra, P Kumar, Proceedings of the Fifth International Conference on Fuzzy and Neuro Computing (FANCCO-2015). Tweet sentiment classification using an ensemble of machine learning supervised classifiers employing statistical feature selection methods (Springer, Hyderabad, 2015), pp. 1–13
36. N Nissim, R Moskovitch, L Rokach, Y Elovici, Detecting unknown computer worm activity via support vector machines and active learning. Pattern Anal Appl 15(4), 459–475 (2012)
37. M Moradkhani, A Amiri, M Javaherian, H Safari, A hybrid algorithm for feature subset selection in high-dimensional datasets using FICA and IWSSr algorithm. Appl Soft Comput 35, 123–135 (2015)
38. N Sánchez-Maroño, A Alonso-Betanzos, M Tombilla-Sanromán, Proceedings of the Eighth International Conference on Intelligent Data Engineering and Automated Learning (IDEAL 2007). Filter methods for feature selection—a comparative study (Springer, Birmingham, 2007), pp. 178–187
39. J Gehrke, V Ganti, R Ramakrishnan, W Loh, Proceedings of the International Conference on Management of Data, in BOAT—optimistic decision tree construction (ACM SIGMOD, Philadelphia, 1999), pp. 169–180
40. C Xiang, P Yong, L Meng, Design of multiple-level hybrid classifier for intrusion detection system using Bayesian clustering and decision trees. Pattern Recognit Lett 29(7), 918–924 (2008)
41. T Bujlow, T Riaz, J Pedersen, Proceedings of the International Conference on Computing, Networking and Communications (ICNC), in A method for classification of network traffic based on C5. 0 Machine Learning Algorithm (IEEE, Maui, 2012), pp. 237–241
42. H Eid, A Hassanien, T Kim, S Banerjee, Proceedings of the 1st International Conference on Advances in Security of Information and Communication Networks (SecNet). Linear correlation-based feature selection for network intrusion detection model (Springer, Cairo, 2013), pp. 240–248
43. M Tavallaee, E Bagheri, W Lu, A Ghorbani, Proceedings of the 2nd Symposium on Computational Intelligence for Security and Defence Applications(CISDA), in A detailed analysis of the KDD CUP 99 data set (IEEE, Ottawa, 2009), pp. 1–6
44. J Yu, H Kang, D Park, H Bang, D Kang, An in-depth analysis on traffic flooding attacks detection and system using data mining techniques. J Syst Architect 59(10), 1005–1012 (2013)
45. S Rastegari, P Hingston, C Lam, Evolving statistical rulesets for network intrusion detection. Appl Soft Comput 33, 348–359 (2015)