Abstract:An intrusion detection system (IDS) is a system that monitors network traffic for malicious activity and generates alerts. In anomaly-based detection, machine learning (ML) algorithms exploit various statistical and probabilistic methods to learn from past or historical experience and detect valuable patterns from large, unstructured, and complex datasets. ML-based network intrusion detection aims to identify malicious behavior and alert a system administrator when an intruder tries to penetrate the network. This paper deals with the study, strategic construction, and implementation of a network intrusion detection model based on ML methods. Among the available IDS datasets, five of the most relevant are chosen for the experimental analysis, which are NSL-KDD-2009, CIC-IDS2017, CIC-IDS2018, IoTID20, and UNSW-NB15 datasets. In order to reduce the computation time in the training sample and achieve computational complexity , we propose a computationally efficient and feasible algorithmic framework for analyzing the network traffic data. The developed approach mainly consists of two phases, i.e., "Scatter Matrices and Eigenvalue Computation based feature Selection" and "Classification procedure for the reduced dimension data." Experimental evaluation of various test case scenarios for the chosen datasets is carried out in the simulation setting. It is observed that the test results outperform the existing intrusion detection methods for detecting certain attack categories.

A Novel Active Cost-Sensitive Learning Method for Intrusion Detection

Cost-sensitive active learning algorithm for intrusion detection

A Mixed Intrusion Detection System Utilizing K-means and Extreme Gradient Boosting

Intrusion Detection Using Cost-Sensitive Classification

A Cost-Sensitive Deep Learning-Based Approach for Network Traffic Classification

A Novel Intrusion Detection System Based on an Optimal Hybrid Kernel Extreme Learning Machine

Toward cost-sensitive modeling for intrusion detection and response

Supervised Intrusion Detection Based on Active Learning and TCM-KNN Algorithm

Nonparametric active learning for cost-sensitive classification

Adaptive deep learning for network intrusion detection by risk analysis

Learning to Detect: A Data-driven Approach for Network Intrusion Detection

Support Vector Machine Active Learning in Network Intrusion Detection

Intrusion detection system using classification algorithms with feature selection mechanism over real-time data traffic

Cyber Situation Awareness with Active Learning for Intrusion Detection

Network IDSs Based on the SVM Active Learning Algorithm

Decision Cost Feature Weighting and Its Application in Intrusion Detection

A High-Performance Intrusion Detection Method Based on Combining Supervised and Unsupervised Learning

A Cost-Sensitive Machine Learning Model with Multitask Learning for Intrusion Detection in IoT

A Low-Cost Machine Learning Based Network Intrusion Detection System with Data Privacy Preservation

A computationally efficient dimensionality reduction and attack classification approach for network intrusion detection

Research on Adaptive Intrusion Response System Based on Active-Network