Ensemble classifiers for network intrusion detection system

Two of the major challenges in designing anomaly intrusion detection are to maximize detection accuracy and to minimize false alarm rate. In addressing this issue, this paper proposes an ensemble of one-class classifiers where each adopts different learning paradigms. The techniques deployed in this...

Full description

Bibliographic Details
Main Authors: Zainal, Anazida, Maarof, Mohd. Aizaini, Shamsuddin, Siti Mariyam
Format: Article
Published: Dynamic Pub. 2009
Subjects:
_version_ 1796855849693478912
author Zainal, Anazida
Maarof, Mohd. Aizaini
Shamsuddin, Siti Mariyam
author_facet Zainal, Anazida
Maarof, Mohd. Aizaini
Shamsuddin, Siti Mariyam
author_sort Zainal, Anazida
collection ePrints
description Two of the major challenges in designing anomaly intrusion detection are to maximize detection accuracy and to minimize false alarm rate. In addressing this issue, this paper proposes an ensemble of one-class classifiers where each adopts different learning paradigms. The techniques deployed in this ensemble model are; Linear Genetic Programming (LGP), Adaptive Neural Fuzzy Inference System (ANFIS) and Random Forest (RF). The strengths from the individual models were evaluated and ensemble rule was formulated. Prior to classification, a 2-tier feature selection process was performed to expedite the detection process. Empirical results show an improvement in detection accuracy for all classes of network traffic; Normal, Probe, DoS, U2R and R2L. Random Forest, which is an ensemble learning technique that generates many classification trees and aggregates the individual result was also able to address imbalance dataset problem that many of machine learning techniques fail to sufficiently address it.
first_indexed 2024-03-05T18:34:38Z
format Article
id utm.eprints-21012
institution Universiti Teknologi Malaysia - ePrints
last_indexed 2024-03-05T18:34:38Z
publishDate 2009
publisher Dynamic Pub.
record_format dspace
spelling utm.eprints-210122018-11-29T07:34:45Z http://eprints.utm.my/21012/ Ensemble classifiers for network intrusion detection system Zainal, Anazida Maarof, Mohd. Aizaini Shamsuddin, Siti Mariyam Q Science (General) QA75 Electronic computers. Computer science Two of the major challenges in designing anomaly intrusion detection are to maximize detection accuracy and to minimize false alarm rate. In addressing this issue, this paper proposes an ensemble of one-class classifiers where each adopts different learning paradigms. The techniques deployed in this ensemble model are; Linear Genetic Programming (LGP), Adaptive Neural Fuzzy Inference System (ANFIS) and Random Forest (RF). The strengths from the individual models were evaluated and ensemble rule was formulated. Prior to classification, a 2-tier feature selection process was performed to expedite the detection process. Empirical results show an improvement in detection accuracy for all classes of network traffic; Normal, Probe, DoS, U2R and R2L. Random Forest, which is an ensemble learning technique that generates many classification trees and aggregates the individual result was also able to address imbalance dataset problem that many of machine learning techniques fail to sufficiently address it. Dynamic Pub. 2009 Article PeerReviewed Zainal, Anazida and Maarof, Mohd. Aizaini and Shamsuddin, Siti Mariyam (2009) Ensemble classifiers for network intrusion detection system. Journal of Information Assurance & Security, 4 . pp. 217-225. ISSN 1554-1010 http://dms.library.utm.my:8080/vital/access/manager/Repository/vital:69891?site_name=Restricted+Repository&query=Ensemble+classifiers+for+network+intrusion+detection+system&queryType=vitalDismax
spellingShingle Q Science (General)
QA75 Electronic computers. Computer science
Zainal, Anazida
Maarof, Mohd. Aizaini
Shamsuddin, Siti Mariyam
Ensemble classifiers for network intrusion detection system
title Ensemble classifiers for network intrusion detection system
title_full Ensemble classifiers for network intrusion detection system
title_fullStr Ensemble classifiers for network intrusion detection system
title_full_unstemmed Ensemble classifiers for network intrusion detection system
title_short Ensemble classifiers for network intrusion detection system
title_sort ensemble classifiers for network intrusion detection system
topic Q Science (General)
QA75 Electronic computers. Computer science
work_keys_str_mv AT zainalanazida ensembleclassifiersfornetworkintrusiondetectionsystem
AT maarofmohdaizaini ensembleclassifiersfornetworkintrusiondetectionsystem
AT shamsuddinsitimariyam ensembleclassifiersfornetworkintrusiondetectionsystem