Abstract:Network intrusion detection is an important technology in national cyberspace security strategy and has become a research hotspot in various cyberspace security issues in recent years. The development of effective and efficient intelligent network intrusion detection methods using advanced machine learning algorithms is of great importance for defending against various network intrusions in complex network environments. In this study, a network intrusion detection method based on decision tree twin support vector machine and hierarchical clustering, named HC-DTTWSVM, is proposed, which can effectively detect different categories of network intrusion. First, the hierarchical clustering algorithm is applied to construct the decision tree for network traffic data, where the bottom-up merging approach is used to maximize the separation of the upper nodes of the decision tree, which reduces the error accumulation in the construction of the decision tree. Then, twin support vector machines are embedded in the constructed decision tree to implement the network intrusion detection model, which can effectively detect the network intrusion category in a top-down manner. The detection performance of the proposed HC-DTTWSVM method is evaluated on NSL-KDD and UNSW-NB15 intrusion detection benchmark datasets. Experimental results show that HC-DTTWSVM can effectively detect different categories of network intrusion and achieves comparable detection performance compared to some of the recently proposed network intrusion detection methods.

Intrusion Detection Research Based on Support Vector Machine

A Mixed Intrusion Detection System Utilizing K-means and Extreme Gradient Boosting

Abnormal Intrusion Detection System Based on Support Vector Machines

Application of Support Vector Machine in the Intrusion Detection System

Application of Support Vector Machines on Network Abnormal Intrusion Detection

Intrusion Detection System Based on Feature Selection and Support Vector Machine

Research on Application of Support Vector Machine in Intrusion Detection

Analysis of Support Vector Machine-based Intrusion Detection Techniques

SVM-based Network Intrusion Detection Model

Intrusion Detection Systems Using Support Vector Machines on the KDDCUP'99 and NSL-KDD Datasets: A Comprehensive Survey

An Anomaly Intrusion Detection Technique of Support Vector Machine Based on Rough Set Attribute Reduction

An adaptive network intrusion detection method based on PCA and support vector machines

An intrusion detection method based on feature selection and support vector machine

Support Vector Machine Active Learning in Network Intrusion Detection

On The Efficiency Of Support Vector Classifiers For Intrusion Detection

Study on Network Intrusion Detection Based on TSVM

Detect Intrusion Using Rough Set and Support Vector Machine

HC-DTTSVM: A Network Intrusion Detection Method Based on Decision Tree Twin Support Vector Machine and Hierarchical Clustering

Real-time intrusion detection system based on one-class SVM

Two-level Feature Selection Method Based on SVM for Intrusion Detection