Abstract:Intrusion detection ( ID ) methods are security frameworks designed to safeguard network information systems. The strength of an intrusion detection method is dependent on the robustness of the feature selection method. This study developed a multi-level random forest algorithm for intrusion detection using a fuzzy inference system. The strengths of the filter and wrapper approaches are combined in this work to create a more advanced multi-level feature selection technique, which strengthens network security. The first stage of the multi-level feature selection is the filter method using a correlation-based feature selection to select essential features based on the multi-collinearity in the data. The correlation-based feature selection used a genetic search method to choose the best features from the feature set. The genetic search algorithm assesses the merits of each attribute, which then delivers the characteristics with the highest fitness values for selection. A rule assessment has also been used to determine whether two feature subsets have the same fitness value, which ultimately returns the feature subset with the fewest features. The second stage is a wrapper method based on the sequential forward selection method to further select top features based on the accuracy of the baseline classifier. The selected top features serve as input into the random forest algorithm for detecting intrusions. Finally, fuzzy logic was used to classify intrusions as either normal, low, medium, or high to reduce misclassification. When the developed intrusion method was compared to other existing models using the same dataset, the results revealed a higher accuracy, precision, sensitivity, specificity, and F1-score of 99.46%, 99.46%, 99.46%, 93.86%, and 99.46%, respectively. The classification of attacks using the fuzzy inference system also indicates that the developed method can correctly classify attacks with reduced misclassification. The use of a multi-level feature selection method to leverage the advantages of filter and wrapper feature selection methods and fuzzy logic for intrusion classification makes this study unique.

Phases vs. Levels using Decision Trees for Intrusion Detection Systems

Hybrid Multi-level Intrusion Detection System

Network Intrusion Detection using Decision Tree and Random Forest

An intrusion detection method based on decision tree

Decision Tree Applied in Web-Based Intrusion Detection System

Intrusion Techniques: Comparative Study of Network Intrusion Detection Systems

A Multi-level Random Forest Model-Based Intrusion Detection Using Fuzzy Inference System for Internet of Things Networks

Hierarchical Classification for Intrusion Detection System: Effective Design and Empirical Analysis

Network intrusion detection system: machine learning approach

Combining Naive Bayes and Decision Tree for Adaptive Intrusion Detection

HIDS-DT: an Effective Hybrid Intrusion Detection System Based on Decision Tree

Identifying the most accurate machine learning classification technique to detect network threats

Performance Comparison of Support Vector Machine, Random Forest, and Extreme Learning Machine for Intrusion Detection

An empirical evaluation for the intrusion detection features based on machine learning and feature selection methods

A Hybrid Visualizing Approach Based on Adaptive Neuro-fuzzy Inference System, Decision Tree, and K-means for Intrusion Detection

A hybrid interpretable deep structure based on adaptive neuro-fuzzy inference system, decision tree, and K-means for intrusion detection

Deep Neural Decision Forest (DNDF): A Novel Approach for Enhancing Intrusion Detection Systems in Network Traffic Analysis

Intrusion detection method for internet of things based on the spiking neural network and decision tree method

Research on Principle Techniques for Network Intrusion Detection Based on Data Mining and Analysis Approach

Enhanced Intrusion Detection Systems Performance with UNSW-NB15 Data Analysis

Intrusion detection system using classification algorithms with feature selection mechanism over real-time data traffic