Decision Tree Based Intrusion Detection System for NSL-KDD Dataset

In this paper, Decision Tree (DT) based IDS is proposed for NSL-KDD dataset. The proposed work uses Correlation Feature Selection (CFS) subset evaluation method for feature selection. Feature selection improves the prediction performance of DT based IDS. Performance is evaluated before feature selection and after feature selection for five class classification (normal and types of attack) and binary class classification (normal and attack). The obtained result is compared and analyzed with the other reported techniques. The analysis shows that the proposed DT based IDS provides high DR and accuracy. The overall result for binary class classification for the dataset is higher than five class classification.

[1]  Dorothy E. Denning,et al.  An Intrusion-Detection Model , 1987, IEEE Transactions on Software Engineering.

[2]  Wei Hu,et al.  AdaBoost-Based Algorithm for Network Intrusion Detection , 2008, IEEE Transactions on Systems, Man, and Cybernetics, Part B (Cybernetics).

[3]  Azween Abdullah,et al.  Intrusions Detection based on Optimum Features Subset and Efficient Dataset Selection , 2012 .

[4]  V. Rao Vemuri,et al.  Use of K-Nearest Neighbor classifier for intrusion detection , 2002, Comput. Secur..

[5]  Rowayda A. Sadek,et al.  Effective Anomaly Intrusion Detection System based on Neural Network with Indicator Variable and Rou , 2013 .

[6]  Vir V. Phoha,et al.  K-Means+ID3: A Novel Method for Supervised Anomaly Detection by Cascading K-Means Clustering and ID3 Decision Tree Learning Methods , 2007, IEEE Transactions on Knowledge and Data Engineering.

[7]  Yixian Yang,et al.  A distance sum-based hybrid method for intrusion detection , 2013, Applied Intelligence.

[8]  Ali A. Ghorbani,et al.  IEEE TRANSACTIONS ON SYSTEMS, MAN, AND CYBERNETICS—PART C: APPLICATIONS AND REVIEWS 1 Toward Credible Evaluation of Anomaly-Based Intrusion-Detection Methods , 2022 .

[9]  Malcolm I. Heywood,et al.  Training genetic programming on half a million patterns: an example from anomaly detection , 2005, IEEE Transactions on Evolutionary Computation.

[10]  Kanwal Garg,et al.  Determining feature set of DOS attacks , 2013 .

[11]  Servane Gey,et al.  Model selection for CART regression trees , 2005, IEEE Transactions on Information Theory.

[12]  Anamika Yadav,et al.  Performance analysis of NSL-KDD dataset using ANN , 2015, 2015 International Conference on Signal Processing and Communication Engineering Systems.

[13]  Mahmod S. Mahmod,et al.  A COMPARISON STUDY FOR INTRUSION DATABASE (KDD99, NSL-KDD) BASED ON SELF ORGANIZATION MAP (SOM) ARTIFICIAL NEURAL NETWORK , 2013 .

[14]  Abdolreza Mirzaei,et al.  Intrusion detection using fuzzy association rules , 2009, Appl. Soft Comput..

[15]  Karan Bajaj,et al.  Improving the Intrusion Detection using Discriminative Machine Learning Approach and Improve the Time Complexity by Data Mining Feature Selection Methods , 2013 .

[16]  Cheng Xiang,et al.  Design of Multiple-Level Hybrid Classifier for Intrusion Detection System , 2005, 2005 IEEE Workshop on Machine Learning for Signal Processing.

[17]  B Neethu.  Adaptive Intrusion Detection Using Machine Learning , 2013 .

[18]  Jugal K. Kalita,et al.  Network Anomaly Detection: Methods, Systems and Tools , 2014, IEEE Communications Surveys & Tutorials.