显著增强特征选择,提高网络入侵检测能力

W. Al-Sharafat
{"title":"显著增强特征选择,提高网络入侵检测能力","authors":"W. Al-Sharafat","doi":"10.1109/ICEELI.2012.6360644","DOIUrl":null,"url":null,"abstract":"Intrusion Detection System (IDS) is used to identify unknown or new type of attacks especially in dynamic environments as business and mobile networks. For that importance, IDS has become one of targeted research area that focuses on information security. Among different techniques, Enhanced Steady State Genetic-Based Machine Learning Algorithm (ESSGBML) offers the ability to detect intrusions especially in changing environments. The objective of this paper is to incorporate several enhancements starting with feature selection and then applying Fuzzy Logic to enhance Genetic Algorithm (GA). Selection network features has a great importance to increase detection rate, which is itself a problem in Intrusion Detection System (IDS). Since elimination of the insignificant and/or useless features leads to a simplified problem and enhance detection rate. By combining different selected features that will be evaluated, where this will lead us to determine suitable combination features to attain best results. In ESSGBML, Zeroth Level Classifier System (ZCS) plays the role of detector by matching incoming environment message with classifiers to determine whether it is normal or intrusion. For GA, the probability of crossover will be enhanced by applying fuzzy logic. The experiments and evaluations for compound methods were performed on KDD 99 dataset to detect network intrusions.","PeriodicalId":398065,"journal":{"name":"International Conference on Education and e-Learning Innovations","volume":"52 1","pages":"0"},"PeriodicalIF":0.0000,"publicationDate":"2012-07-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":"1","resultStr":"{\"title\":\"Significant enhancements in feature selection to improve detecting network intrusions\",\"authors\":\"W. Al-Sharafat\",\"doi\":\"10.1109/ICEELI.2012.6360644\",\"DOIUrl\":null,\"url\":null,\"abstract\":\"Intrusion Detection System (IDS) is used to identify unknown or new type of attacks especially in dynamic environments as business and mobile networks. For that importance, IDS has become one of targeted research area that focuses on information security. Among different techniques, Enhanced Steady State Genetic-Based Machine Learning Algorithm (ESSGBML) offers the ability to detect intrusions especially in changing environments. The objective of this paper is to incorporate several enhancements starting with feature selection and then applying Fuzzy Logic to enhance Genetic Algorithm (GA). Selection network features has a great importance to increase detection rate, which is itself a problem in Intrusion Detection System (IDS). Since elimination of the insignificant and/or useless features leads to a simplified problem and enhance detection rate. By combining different selected features that will be evaluated, where this will lead us to determine suitable combination features to attain best results. In ESSGBML, Zeroth Level Classifier System (ZCS) plays the role of detector by matching incoming environment message with classifiers to determine whether it is normal or intrusion. For GA, the probability of crossover will be enhanced by applying fuzzy logic. The experiments and evaluations for compound methods were performed on KDD 99 dataset to detect network intrusions.\",\"PeriodicalId\":398065,\"journal\":{\"name\":\"International Conference on Education and e-Learning Innovations\",\"volume\":\"52 1\",\"pages\":\"0\"},\"PeriodicalIF\":0.0000,\"publicationDate\":\"2012-07-01\",\"publicationTypes\":\"Journal Article\",\"fieldsOfStudy\":null,\"isOpenAccess\":false,\"openAccessPdf\":\"\",\"citationCount\":\"1\",\"resultStr\":null,\"platform\":\"Semanticscholar\",\"paperid\":null,\"PeriodicalName\":\"International Conference on Education and e-Learning Innovations\",\"FirstCategoryId\":\"1085\",\"ListUrlMain\":\"https://doi.org/10.1109/ICEELI.2012.6360644\",\"RegionNum\":0,\"RegionCategory\":null,\"ArticlePicture\":[],\"TitleCN\":null,\"AbstractTextCN\":null,\"PMCID\":null,\"EPubDate\":\"\",\"PubModel\":\"\",\"JCR\":\"\",\"JCRName\":\"\",\"Score\":null,\"Total\":0}","platform":"Semanticscholar","paperid":null,"PeriodicalName":"International Conference on Education and e-Learning Innovations","FirstCategoryId":"1085","ListUrlMain":"https://doi.org/10.1109/ICEELI.2012.6360644","RegionNum":0,"RegionCategory":null,"ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":null,"EPubDate":"","PubModel":"","JCR":"","JCRName":"","Score":null,"Total":0}
引用次数: 1

摘要

入侵检测系统(IDS)用于识别未知的或新型的攻击,特别是在商业和移动网络等动态环境中。由于这种重要性,入侵检测已成为信息安全领域的研究重点之一。在不同的技术中,增强型稳态遗传机器学习算法(ESSGBML)提供了检测入侵的能力,特别是在不断变化的环境中。本文的目标是从特征选择开始,然后应用模糊逻辑来增强遗传算法(GA)。选择网络特征对提高检测率具有重要意义,这本身就是入侵检测系统(IDS)中的一个问题。因为消除不重要和/或无用的特征可以简化问题并提高检测率。通过组合将被评估的不同选择的特征,这将引导我们确定合适的组合特征以获得最佳结果。在ESSGBML中,零级分类器系统(zero - Level Classifier System, ZCS)扮演检测器的角色,将传入的环境信息与分类器进行匹配,判断其是正常的还是入侵的。对于遗传算法,应用模糊逻辑可以提高交叉概率。在KDD 99数据集上对复合方法进行了网络入侵检测实验和评价。
本文章由计算机程序翻译,如有差异,请以英文原文为准。
Significant enhancements in feature selection to improve detecting network intrusions
Intrusion Detection System (IDS) is used to identify unknown or new type of attacks especially in dynamic environments as business and mobile networks. For that importance, IDS has become one of targeted research area that focuses on information security. Among different techniques, Enhanced Steady State Genetic-Based Machine Learning Algorithm (ESSGBML) offers the ability to detect intrusions especially in changing environments. The objective of this paper is to incorporate several enhancements starting with feature selection and then applying Fuzzy Logic to enhance Genetic Algorithm (GA). Selection network features has a great importance to increase detection rate, which is itself a problem in Intrusion Detection System (IDS). Since elimination of the insignificant and/or useless features leads to a simplified problem and enhance detection rate. By combining different selected features that will be evaluated, where this will lead us to determine suitable combination features to attain best results. In ESSGBML, Zeroth Level Classifier System (ZCS) plays the role of detector by matching incoming environment message with classifiers to determine whether it is normal or intrusion. For GA, the probability of crossover will be enhanced by applying fuzzy logic. The experiments and evaluations for compound methods were performed on KDD 99 dataset to detect network intrusions.
求助全文
通过发布文献求助,成功后即可免费获取论文全文。 去求助
来源期刊
自引率
0.00%
发文量
0
×
引用
GB/T 7714-2015
复制
MLA
复制
APA
复制
导出至
BibTeX EndNote RefMan NoteFirst NoteExpress
×
提示
您的信息不完整,为了账户安全,请先补充。
现在去补充
×
提示
您因"违规操作"
具体请查看互助需知
我知道了
×
提示
确定
请完成安全验证×
copy
已复制链接
快去分享给好友吧!
我知道了
右上角分享
点击右上角分享
0
联系我们:info@booksci.cn Book学术提供免费学术资源搜索服务,方便国内外学者检索中英文文献。致力于提供最便捷和优质的服务体验。 Copyright © 2023 布克学术 All rights reserved.
京ICP备2023020795号-1
ghs 京公网安备 11010802042870号
Book学术文献互助
Book学术文献互助群
群 号:481959085
Book学术官方微信