使用机器学习方法检测网络安全绕过威胁:检测网络上的入侵者

IF 1.5 4区 计算机科学 Q3 COMPUTER SCIENCE, SOFTWARE ENGINEERING
Seyed Ebrahim Dashti, Wassan Sajit Nasser Al-Jabri, Ali Farzanehmehr
{"title":"使用机器学习方法检测网络安全绕过威胁:检测网络上的入侵者","authors":"Seyed Ebrahim Dashti,&nbsp;Wassan Sajit Nasser Al-Jabri,&nbsp;Ali Farzanehmehr","doi":"10.1002/cpe.70062","DOIUrl":null,"url":null,"abstract":"<div>\n \n <p>The problem of cybersecurity has grown in importance. Machine learning (ML) systems can detect network penetration. Imbalanced data sets have a detrimental impact on typical network intrusion detection. To be more precise, seven traditional ML algorithms were tested against two versions of a fully connected neural network, one with and one without an autoencoder. Additionally, an electing classifier is suggested as a means to integrate the outcomes of these nine ML algorithms. The majority electing classifier allows for the combination of several weak classifiers into a strong classifier. The number and type of weak classifiers used will have an impact on the final ensemble classifier's performance Three distinct resampling methods oversampling, undersampling, and hybrid sampling are used to evaluate each model. Next, we will go over the specifics of the trials and how we analyzed the data. The comparison results show that the performance of the classifiers on balanced data outperforms those on (\nhttps://www.sciencedirect.com/topics/computer-science/imbalanced-data) imbalanced data, and the electing classifier outperforms the nine algorithms. A weighted <i>F</i>1 score is a good performance metric to evaluate solutions in intrusion detection systems. Due to the importance of the <i>F</i>1 score parameter, the proposed method has reached a predict of 80%, which is a significant improvement compared to related works.</p>\n </div>","PeriodicalId":55214,"journal":{"name":"Concurrency and Computation-Practice & Experience","volume":"37 9-11","pages":""},"PeriodicalIF":1.5000,"publicationDate":"2025-04-09","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":"0","resultStr":"{\"title\":\"Detecting Network Security Bypass Threats Using Machine Learning Methods: Detecting Intruders on the Network\",\"authors\":\"Seyed Ebrahim Dashti,&nbsp;Wassan Sajit Nasser Al-Jabri,&nbsp;Ali Farzanehmehr\",\"doi\":\"10.1002/cpe.70062\",\"DOIUrl\":null,\"url\":null,\"abstract\":\"<div>\\n \\n <p>The problem of cybersecurity has grown in importance. Machine learning (ML) systems can detect network penetration. Imbalanced data sets have a detrimental impact on typical network intrusion detection. To be more precise, seven traditional ML algorithms were tested against two versions of a fully connected neural network, one with and one without an autoencoder. Additionally, an electing classifier is suggested as a means to integrate the outcomes of these nine ML algorithms. The majority electing classifier allows for the combination of several weak classifiers into a strong classifier. The number and type of weak classifiers used will have an impact on the final ensemble classifier's performance Three distinct resampling methods oversampling, undersampling, and hybrid sampling are used to evaluate each model. Next, we will go over the specifics of the trials and how we analyzed the data. The comparison results show that the performance of the classifiers on balanced data outperforms those on (\\nhttps://www.sciencedirect.com/topics/computer-science/imbalanced-data) imbalanced data, and the electing classifier outperforms the nine algorithms. A weighted <i>F</i>1 score is a good performance metric to evaluate solutions in intrusion detection systems. Due to the importance of the <i>F</i>1 score parameter, the proposed method has reached a predict of 80%, which is a significant improvement compared to related works.</p>\\n </div>\",\"PeriodicalId\":55214,\"journal\":{\"name\":\"Concurrency and Computation-Practice & Experience\",\"volume\":\"37 9-11\",\"pages\":\"\"},\"PeriodicalIF\":1.5000,\"publicationDate\":\"2025-04-09\",\"publicationTypes\":\"Journal Article\",\"fieldsOfStudy\":null,\"isOpenAccess\":false,\"openAccessPdf\":\"\",\"citationCount\":\"0\",\"resultStr\":null,\"platform\":\"Semanticscholar\",\"paperid\":null,\"PeriodicalName\":\"Concurrency and Computation-Practice & Experience\",\"FirstCategoryId\":\"94\",\"ListUrlMain\":\"https://onlinelibrary.wiley.com/doi/10.1002/cpe.70062\",\"RegionNum\":4,\"RegionCategory\":\"计算机科学\",\"ArticlePicture\":[],\"TitleCN\":null,\"AbstractTextCN\":null,\"PMCID\":null,\"EPubDate\":\"\",\"PubModel\":\"\",\"JCR\":\"Q3\",\"JCRName\":\"COMPUTER SCIENCE, SOFTWARE ENGINEERING\",\"Score\":null,\"Total\":0}","platform":"Semanticscholar","paperid":null,"PeriodicalName":"Concurrency and Computation-Practice & Experience","FirstCategoryId":"94","ListUrlMain":"https://onlinelibrary.wiley.com/doi/10.1002/cpe.70062","RegionNum":4,"RegionCategory":"计算机科学","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":null,"EPubDate":"","PubModel":"","JCR":"Q3","JCRName":"COMPUTER SCIENCE, SOFTWARE ENGINEERING","Score":null,"Total":0}
引用次数: 0

摘要

网络安全问题变得越来越重要。机器学习(ML)系统可以检测网络渗透。不平衡的数据集对典型的网络入侵检测有不利的影响。更准确地说,七种传统的机器学习算法针对两个版本的全连接神经网络进行了测试,一个有一个没有自动编码器。此外,还提出了一种选择分类器作为整合这九种机器学习算法结果的手段。多数选择分类器允许将几个弱分类器组合成一个强分类器。使用的弱分类器的数量和类型将影响最终集成分类器的性能,使用三种不同的重采样方法过采样,欠采样和混合采样来评估每个模型。接下来,我们将回顾试验的细节以及我们如何分析数据。对比结果表明,分类器在平衡数据上的性能优于(https://www.sciencedirect.com/topics/computer-science/imbalanced-data)不平衡数据上的分类器,选择分类器的性能优于9种算法。在入侵检测系统中,加权F1分数是评价解决方案的一个很好的性能指标。由于F1分数参数的重要性,本文方法的预测准确率达到80%,与相关工作相比有显著提高。
本文章由计算机程序翻译,如有差异,请以英文原文为准。
Detecting Network Security Bypass Threats Using Machine Learning Methods: Detecting Intruders on the Network

The problem of cybersecurity has grown in importance. Machine learning (ML) systems can detect network penetration. Imbalanced data sets have a detrimental impact on typical network intrusion detection. To be more precise, seven traditional ML algorithms were tested against two versions of a fully connected neural network, one with and one without an autoencoder. Additionally, an electing classifier is suggested as a means to integrate the outcomes of these nine ML algorithms. The majority electing classifier allows for the combination of several weak classifiers into a strong classifier. The number and type of weak classifiers used will have an impact on the final ensemble classifier's performance Three distinct resampling methods oversampling, undersampling, and hybrid sampling are used to evaluate each model. Next, we will go over the specifics of the trials and how we analyzed the data. The comparison results show that the performance of the classifiers on balanced data outperforms those on ( https://www.sciencedirect.com/topics/computer-science/imbalanced-data) imbalanced data, and the electing classifier outperforms the nine algorithms. A weighted F1 score is a good performance metric to evaluate solutions in intrusion detection systems. Due to the importance of the F1 score parameter, the proposed method has reached a predict of 80%, which is a significant improvement compared to related works.

求助全文
通过发布文献求助,成功后即可免费获取论文全文。 去求助
来源期刊
Concurrency and Computation-Practice & Experience
Concurrency and Computation-Practice & Experience 工程技术-计算机:理论方法
CiteScore
5.00
自引率
10.00%
发文量
664
审稿时长
9.6 months
期刊介绍: Concurrency and Computation: Practice and Experience (CCPE) publishes high-quality, original research papers, and authoritative research review papers, in the overlapping fields of: Parallel and distributed computing; High-performance computing; Computational and data science; Artificial intelligence and machine learning; Big data applications, algorithms, and systems; Network science; Ontologies and semantics; Security and privacy; Cloud/edge/fog computing; Green computing; and Quantum computing.
×
引用
GB/T 7714-2015
复制
MLA
复制
APA
复制
导出至
BibTeX EndNote RefMan NoteFirst NoteExpress
×
提示
您的信息不完整,为了账户安全,请先补充。
现在去补充
×
提示
您因"违规操作"
具体请查看互助需知
我知道了
×
提示
确定
请完成安全验证×
copy
已复制链接
快去分享给好友吧!
我知道了
右上角分享
点击右上角分享
0
联系我们:info@booksci.cn Book学术提供免费学术资源搜索服务,方便国内外学者检索中英文文献。致力于提供最便捷和优质的服务体验。 Copyright © 2023 布克学术 All rights reserved.
京ICP备2023020795号-1
ghs 京公网安备 11010802042870号
Book学术文献互助
Book学术文献互助群
群 号:481959085
Book学术官方微信