Implementation and Analysis of Combined Machine Learning Method for Intrusion Detection System.

Bisyron Wahyudi; Kalamullah Ramli; Hendri Murfi

Author(s)

Bisyron Wahyudi Department of Electrical Engineering, Faculty of Engineering, Universitas Indonesia, Indonesia

Kalamullah Ramli Department of Electrical Engineering, Faculty of Engineering, Universitas Indonesia, Indonesia

Hendri Murfi Department of Mathematics, Faculty of Science, Universitas Indonesia, Indonesia

Abstract

-As one of the security components in Network Security Monitoring System, Intrusion Detection System (IDS) is implemented by many organizations in their networks to detect and address the impact of network attacks. Many machine-learning methods have been widely developed and applied in the IDS. Selection of appropriate methods is necessary to improve the detection accuracy in the application of machine-learning in IDS. In this research, we proposed an IDS that we developed based on machine learning approach. We use 28 features subset without content features of Knowledge Data Discovery (KDD) dataset to build machine learning model and are most likely to be applied for the IDS in the real network. The machine learning model based on this 28 features subset achieves 99.9% accuracy for both two-class and multiclass classification. From our experiments using the IDS, we have developed good performance in detecting attacks on real networks.

Publication Details

Page(s) 295-322

DOI DOI not available

Published Journal: International Journal of Communication Networks and Information Security, Volume: 10, Issue: 2, Year: 2018

Request the full text from PASTIC

References

ZayedAl,Haddad,MostafaHanoune,AbdelazizMamouni, 2016."A Collaborative Network Intrusion Detection System (C-NIDS) in Cloud Computing," International Journal of Communication Networks and Information Security (IJCNIS) vol, 8 130 -135

A. L.Buczak,E.Guven, 2016."A Survey of Data Mining and Machine Learning Methods for Cyber Security Intrusion Detection,",in IEEE Communications Surveys & Tutorials 18 1153 -1176

MonowarHussain Bhuyan,D KBhattacharyya and J K Kalita, 2011."Survey on Incremental Approaches for Network Anomaly Detection" International Journal of Communication Networks and Information Security (IJCNIS) vol, 3 226 -239

M.Tavallaee,N.Stakhanova,A. A.Ghorbani, 2010.Applications,in IEEE Transactions on Systems, Man, and Cybernetics 40 516 -524

Amiruddin, 2017.Anak Agung Putri Ratna, and Riri Fitri Sari " New Key Generation and Encryption Algorithms for Privacy Preservation in Mobile Ad Hoc Networks" International Journal of Communication Networks and Information Security (IJCNIS) vol, 9 376 -385

TrustworthyInternet, .Movement (www, -

https://www.nsslabs.com/company/news/press-releases/nss-labs-predicts-75-of-web-traffic-will-be-encrypted-by-2019/

BlakeAnderson,David McGrew,NS, 2017.Machine Learning for Encrypted Malware Traffic Classification: Accounting for Noisy Labels and Non-Stationarity”,Canada - August 13 - 17 1723 -1732

R.Koch,M.Golling,G. D.Rodosek, July 2014."Behavior-based intrusion detection in encrypted environments," in IEEE Communications Magazine, 52 124 -131

J.Lekha,PadmavathiGanapathi, 2017." Detection of Illegal Traffic Pattern using Hybrid Improved CART and Multiple Extreme Learning Machine Approach,",International Journal of Communication Networks and Information Security (IJCNIS) 9 164 -171

MohammedA.,Ambusaidi,Priyadarsi Nanda , and Zhiyuan,Tan, October 2016." Building an Intrusion Detection System Using a Filter-Based Feature Selection Algorithm," IEEE TRANSACTIONS ON COMPUTERS, 65 -

ChaoukiKhammassi, 2017." A GA-LR wrapper approach for feature selection in network intrusion detection," computers & security 70 (, 06 255 -277

M.R. GauthamaRaman,RamiroLiscano,V.S.Shankar,Sriram, 2017." An efficient intrusion detection system based on hypergraph - a Genetic algorithm for parameter optimization and feature selection in support vector machine,",Knowledge-Based Systems 07 1 -12

Akashdeep , Ishfaq,Manzoor, 2017."A feature reduced intrusion detection system using ANN classifier,",Expert Systems With Applications 07 249 -

SumaiyaThaseen,Ikram, 2015."Intrusion detection model using a fusion of chi-square feature selection and multiclass SVM,",Journal of King 12 462 -472

PrashantKushwaha,BalasubramanianRaman, 2017."Anomaly-Based Intrusion Detection Using Filter Based Feature Selection on KDD-CUP 99,",Malaysia, November 5-8 -

KDD, .Cup 1999 Data http, -

M.Tavallaee,E.Bagheri,W.Lu,A.Ghorbani, 2009."A Detailed Analysis of the KDD CUP 99 Data Set,",The second IEEE Symposium on Computational Intelligence for Security and Defense Applications (CISDA) -

2000.Lee and Stolfo, "A framework for constructing features and models for intrusion detection systems",ACM Transaction on Information and System Security 3 227 -261

JasonDeign, ."The encryption that protects your online data can also hide malware", 1853370 -

MalleyB.,RamazzottiD.,WuJ.T.,", 2016.Data Preprocessing,",Secondary Analysis of Electronic Health Records 12 -141

IsabelleGuyon, 2003.Andre Elisseeff "An Introduction to Variables and Feature Selection",Journal of Machine Learning Research 3 1157 -1182

HanLu, ."Decision tree learning based feature evaluation and selection for image classification,",Proceeding of The 2017 International Conference on Machine Learning and Cybernetics -

NachiratRachburee,WattanaPunlumjeak, ."A Comparison of Feature Selection Approach Between Greedy, IG-ratio, Chi-square, and,Proceeding of The 2015 7th International Conference on Information Technology and Electrical Engineering (ICITEE) -

JunLin, .A Fast Parameters Selection Method of Support Vector Machine Based on Coarse Grid Search and Pattern Search”,Proceeding of 2013 Fourth Global Congress on Intelligent Systems. -

Powers , David M W, ."Evaluation: From Precision, Recall and F-Measure to ROC, Informedness, Markedness & Correlation,",Journal of Machine Learning Technologies 2 37 -63

Pedregosa et al., “Scikit-learn: Machine Learning in Python,” JMLR 12, pp. 2825-2830, 2011.

NSL-KDD Dataset, ., -