A Hybrid Data Mining Approach for Intrusion Detection on Imbalanced NSL-KDD Dataset
Journal Title: International Journal of Advanced Computer Science & Applications - Year 2016, Vol 7, Issue 6
Abstract
Intrusion detection systems aim to detect malicious viruses from computer and network traffic, which is not possible using common firewall. Most intrusion detection systems are developed based on machine learning techniques. Since datasets which used in intrusion detection are imbalanced, in the previous methods, the accuracy of detecting two attack classes, R2L and U2R, is lower than that of the normal and other attack classes. In order to overcome this issue, this study employs a hybrid approach. This hybrid approach is a combination of synthetic minority oversampling technique (SMOTE) and cluster center and nearest neighbor (CANN). Important features are selected using leave one out method (LOO). Moreover, this study employs NSL KDD dataset. Results indicate that the proposed method improves the accuracy of detecting U2R and R2L attacks in comparison to the baseline paper by 94% and 50%, respectively
Authors and Affiliations
Mohammad Parsaei, Samaneh Rostami, Reza Javidan
Keywords
Related Articles
- EP ID EP154284
- DOI 10.14569/IJACSA.2016.070603
- Views 112
- Downloads 0
Improved Industrial Modeling and Harmonic Mitigation of a Grid Connected Steel Plant in Libya
Currently, we are living in a new transition process towards the fourth phase of industrialization, well known as the purported Industry 4.0. This development backbone supposes a sustainable manufacturing. Were optimal f...
Enhancing Visualization of Multidimensional Data by Ordering Parallel Coordinates Axes
Every year business is overwhelmed by the quantity and variety of data. Visualization of Multi-dimensional data is counter-intuitive using conventional graphs. Parallel coordinates are proposed as an alternative to explo...
Probabilistic Algorithm based on Fuzzy Clustering for Indoor Location in Fingerprinting Positioning Method
Recently, the location of the fingerprint positioning technology is obviously superior to the signal transmission loss model based on the positioning technology, and is widely concerned by scholars. In the online phase,...
Variable Reduction-based Prediction through Modified Genetic Algorithm
Due to the massive influence in the use of prediction models in different sectors of society, many researchers have employed hybrid algorithms to increase the accuracy level of the prediction model. The literature sugges...
Heuristics Applied to Mutation Testing in an Impure Functional Programming Language
The task of elaborating accurate test suites for pro-gram testing can be an extensive computational work. Mutation testing is not immune to the problem of being a computational and time-consuming task so that it has foun...