Abstract:Network intrusion detection is an important technology in national cyberspace security strategy and has become a research hotspot in various cyberspace security issues in recent years. The development of effective and efficient intelligent network intrusion detection methods using advanced machine learning algorithms is of great importance for defending against various network intrusions in complex network environments. In this study, a network intrusion detection method based on decision tree twin support vector machine and hierarchical clustering, named HC-DTTWSVM, is proposed, which can effectively detect different categories of network intrusion. First, the hierarchical clustering algorithm is applied to construct the decision tree for network traffic data, where the bottom-up merging approach is used to maximize the separation of the upper nodes of the decision tree, which reduces the error accumulation in the construction of the decision tree. Then, twin support vector machines are embedded in the constructed decision tree to implement the network intrusion detection model, which can effectively detect the network intrusion category in a top-down manner. The detection performance of the proposed HC-DTTWSVM method is evaluated on NSL-KDD and UNSW-NB15 intrusion detection benchmark datasets. Experimental results show that HC-DTTWSVM can effectively detect different categories of network intrusion and achieves comparable detection performance compared to some of the recently proposed network intrusion detection methods.

Decision Tree Applied in Web-Based Intrusion Detection System

Study of Adaptive Intrusion Detection with Data Mining

An intrusion detection method based on decision tree

A multiple-level hybrid intrusion detection system based on hierarchical clustering and decision trees

HIDS-DT: an Effective Hybrid Intrusion Detection System Based on Decision Tree

Combined Rough Set and Decision Tree Method for Intrusion Detection

Network Intrusion Detection using Decision Tree and Random Forest

Intrusion Detection System Based on Decision Tree over Big Data in Fog Environment

Research on Rough Set Theory and Decision Tree Method Applied to IDS

The improvement of intrusion detection by using decision tree based on protocol analysis

HC-DTTSVM: A Network Intrusion Detection Method Based on Decision Tree Twin Support Vector Machine and Hierarchical Clustering

An Intrusion Detection System Based on the Double-Decision-Tree Method for In-Vehicle Network

Phases vs. Levels using Decision Trees for Intrusion Detection Systems

A Hybrid Visualizing Approach Based on Adaptive Neuro-fuzzy Inference System, Decision Tree, and K-means for Intrusion Detection

An Intrusion Detection Method Based on Principal Component Analysis and Decision Tree

Design and Implementation of Adaptive Intrusion Detection System Based on Web Access Behavior Relevancy

Combining Naive Bayes and Decision Tree for Adaptive Intrusion Detection

Network Intrusion Detection Using Wrapper-based Decision Tree for Feature Selection

Research on Principle Techniques for Network Intrusion Detection Based on Data Mining and Analysis Approach

Decision Tree Learning for Freeway Automatic Incident Detection

Modified Mutual Information-based Feature Selection for Intrusion Detection Systems in Decision Tree Learning.