Abstract:Network intrusion detection is an important technology in national cyberspace security strategy and has become a research hotspot in various cyberspace security issues in recent years. The development of effective and efficient intelligent network intrusion detection methods using advanced machine learning algorithms is of great importance for defending against various network intrusions in complex network environments. In this study, a network intrusion detection method based on decision tree twin support vector machine and hierarchical clustering, named HC-DTTWSVM, is proposed, which can effectively detect different categories of network intrusion. First, the hierarchical clustering algorithm is applied to construct the decision tree for network traffic data, where the bottom-up merging approach is used to maximize the separation of the upper nodes of the decision tree, which reduces the error accumulation in the construction of the decision tree. Then, twin support vector machines are embedded in the constructed decision tree to implement the network intrusion detection model, which can effectively detect the network intrusion category in a top-down manner. The detection performance of the proposed HC-DTTWSVM method is evaluated on NSL-KDD and UNSW-NB15 intrusion detection benchmark datasets. Experimental results show that HC-DTTWSVM can effectively detect different categories of network intrusion and achieves comparable detection performance compared to some of the recently proposed network intrusion detection methods.

Real-time intrusion detection system based on one-class SVM

Multi-agent based hybrid Intrusion detection system

A Mixed Intrusion Detection System Utilizing K-means and Extreme Gradient Boosting

An Improved Support Vector Machine Attack Detection Algorithm for Industry Controls System

Intrusion Detection System Based on One-Class Support Vector Machine and Gaussian Mixture Model

Intrusion Detection Based on Improved SVM Algorithm

SVM Classification-Based Intrusion Detection System

Intrusion Detection System Based on Feature Selection and Support Vector Machine

Online Training of SVM for Multiuser Detection

Fusion of rough set theory and linear SVM for intrusion detection system

Intrusion Detection Based on Improved SVM Active Learning

Fast Intrusion Detection Algorithm Based on Reduced SVM

Hybrid Intrusion Detection Method Based On K-Means And Cnn For Smart Home

Network Intrusion Detection Method Based on RS-MSVM

Study on Network Intrusion Detection Based on TSVM

An efficient SVM-Based method to detect malicious attacks for web servers

Distributed Online One-Class Support Vector Machine for Anomaly Detection over Networks

HC-DTTSVM: A Network Intrusion Detection Method Based on Decision Tree Twin Support Vector Machine and Hierarchical Clustering

A Classified Method Based On Support Vector Machine For Grid Computing Intrusion Detection

A BOOSTING APPROACH FOR INTRUSION DETECTION

Using Machine Learning Multiclass Classification Technique to Detect IoT Attacks in Real Time