Abstract:Recently, artificial intelligence (AI) techniques have been used to describe the characteristics of information, as they help in the process of data mining (DM) to analyze data and reveal rules and patterns. In DM, anomaly detection is an important area that helps discover hidden behavior within the data that is most vulnerable to attack. It also helps detect network intrusion. Algorithms such as hybrid K-mean array and sequential minimal optimization (SMO) rating can be used to improve the accuracy of the anomaly detection rate. This paper presents an anomaly detection model based on the machine learning (ML) technique. ML improves the detection rate, reduces the false-positive alarm rate, and is capable of enhancing the accuracy of intrusion classification. This study used a dataset known as network security-knowledge and data discovery (NSL-KDD) lab to evaluate a proposed hybrid ML technology. K-mean cluster and SMO were used for classification. In the study, the performance of the proposed anomaly detection was tested, and results showed that the use of K-mean and SMO enhances the rate of positive detection besides reducing the rate of false alarms and achieving a high accuracy at the same time. Moreover, the proposed algorithm outperformed recent and close work related to using similar variables and the environment by 14.48% and decreased false alarm probability (FAP) by (12%) in addition to giving a higher accuracy by 97.4%. These outcomes are attributed to the common algorithm providing an appropriate number of detectors to be generated with an acceptable accurate detection and a trivial false alarm probability (FAP). The proposed hybrid algorithm could be considered for anomaly detection in future data mining systems, where processing in real-time is highly likely to be reduced dramatically. The justification is that the hybrid algorithm can provide appropriate detectors numbers that can be generated with an acceptable detection accuracy and trivial FAP. Given to the low FAP, it is highly expected to reduce the time of the preprocessing and processing compared with the other algorithms.

Anomaly Detection Model Based on Hybrid Classifiers

Packet Payload Based Anomalous Network Intrusion Detection

Multi-agent based hybrid Intrusion detection system

A hybrid unsupervised clustering-based anomaly detection method

Anomaly Detection Algorithm Based on Electric Equipment

A Hybrid Algorithm Incorporating Vector Quantization and One-Class Support Vector Machine for Industrial Anomaly Detection

Distributed Online One-Class Support Vector Machine for Anomaly Detection over Networks

Hybrid Intrusion Detection Method Based on CM-K-Means

A Modified Hybrid Method Based on PSO, GA, and K-Means for Network Anomaly Detection

HybridAD: A Hybrid Model-Driven Anomaly Detection Approach for Multivariate Time Series

A Novel Model for Anomaly Detection in Network Traffic Based on Support Vector Machine and Clustering

Anomaly Detection Based on Confidence Intervals Using SOM with an Application to Health Monitoring

An Anomaly Detection and Scenario Classification Scheme Based on Fuzzy C-means Clustering

New hybrid ensemble method for anomaly detection in data science

An intelligent algorithm with feature selection and decision rules applied to anomaly intrusion detection

Anomaly Detection Based on Traffic Information Structure

Anomaly-Based Intrusion Detection System Design Using Machine Learning Methods

A multilevel hybrid anomaly detection scheme for industrial wireless sensor networks

Enhancing Anomaly Detection Models for Industrial Applications through SVM-Based False Positive Classification

Machine Learning-Based Anomaly Detection Using K-mean Array and Sequential Minimal Optimization

A DATA ANALYZER IN NETWORK ANOMALY DETECTION SYSTEM BASED ON HIERARCHICAL SELF-ORGANIZING MAP