Abstract:Network intrusion detection is an important technology in national cyberspace security strategy and has become a research hotspot in various cyberspace security issues in recent years. The development of effective and efficient intelligent network intrusion detection methods using advanced machine learning algorithms is of great importance for defending against various network intrusions in complex network environments. In this study, a network intrusion detection method based on decision tree twin support vector machine and hierarchical clustering, named HC-DTTWSVM, is proposed, which can effectively detect different categories of network intrusion. First, the hierarchical clustering algorithm is applied to construct the decision tree for network traffic data, where the bottom-up merging approach is used to maximize the separation of the upper nodes of the decision tree, which reduces the error accumulation in the construction of the decision tree. Then, twin support vector machines are embedded in the constructed decision tree to implement the network intrusion detection model, which can effectively detect the network intrusion category in a top-down manner. The detection performance of the proposed HC-DTTWSVM method is evaluated on NSL-KDD and UNSW-NB15 intrusion detection benchmark datasets. Experimental results show that HC-DTTWSVM can effectively detect different categories of network intrusion and achieves comparable detection performance compared to some of the recently proposed network intrusion detection methods.

A multiple-level hybrid intrusion detection system based on hierarchical clustering and decision trees

A Mixed Intrusion Detection System Utilizing K-means and Extreme Gradient Boosting

Multi-agent based hybrid Intrusion detection system

A Novel Intrusion Detection System Based on an Optimal Hybrid Kernel Extreme Learning Machine

HIDS-DT: an Effective Hybrid Intrusion Detection System Based on Decision Tree

Hybrid Multi-level Intrusion Detection System

An Intrusion Detection Framework Based on Hybrid Multi-Level Data Mining

Research of a Hybrid Intrusion Detection System

HC-DTTSVM: A Network Intrusion Detection Method Based on Decision Tree Twin Support Vector Machine and Hierarchical Clustering

Hybrid Intrusion Detection Method Based on CM-K-Means

Anomaly Detection Using Improved Hierarchy Clustering

Hybrid Intrusion Detection Based on Data Mining

A Hybrid Visualizing Approach Based on Adaptive Neuro-fuzzy Inference System, Decision Tree, and K-means for Intrusion Detection

A hybrid interpretable deep structure based on adaptive neuro-fuzzy inference system, decision tree, and K-means for intrusion detection

Combined Rough Set and Decision Tree Method for Intrusion Detection

Research of Intrusion Detection System Based on Clone Clustering

A hybrid neural network approach to the classification of novel attacks for intrusion detection

An intrusion detection method based on decision tree

An Adaptive Anomaly Detection Based on Hierarchical Clustering

Decision Tree Applied in Web-Based Intrusion Detection System

A Hybrid Intrusion Detection with Decision Tree for Feature Selection