Abstract:Intrusion detection ( ID ) methods are security frameworks designed to safeguard network information systems. The strength of an intrusion detection method is dependent on the robustness of the feature selection method. This study developed a multi-level random forest algorithm for intrusion detection using a fuzzy inference system. The strengths of the filter and wrapper approaches are combined in this work to create a more advanced multi-level feature selection technique, which strengthens network security. The first stage of the multi-level feature selection is the filter method using a correlation-based feature selection to select essential features based on the multi-collinearity in the data. The correlation-based feature selection used a genetic search method to choose the best features from the feature set. The genetic search algorithm assesses the merits of each attribute, which then delivers the characteristics with the highest fitness values for selection. A rule assessment has also been used to determine whether two feature subsets have the same fitness value, which ultimately returns the feature subset with the fewest features. The second stage is a wrapper method based on the sequential forward selection method to further select top features based on the accuracy of the baseline classifier. The selected top features serve as input into the random forest algorithm for detecting intrusions. Finally, fuzzy logic was used to classify intrusions as either normal, low, medium, or high to reduce misclassification. When the developed intrusion method was compared to other existing models using the same dataset, the results revealed a higher accuracy, precision, sensitivity, specificity, and F1-score of 99.46%, 99.46%, 99.46%, 93.86%, and 99.46%, respectively. The classification of attacks using the fuzzy inference system also indicates that the developed method can correctly classify attacks with reduced misclassification. The use of a multi-level feature selection method to leverage the advantages of filter and wrapper feature selection methods and fuzzy logic for intrusion classification makes this study unique.

Masquerade Intrusion Detection Algonthm Based on Interval Type-2 Fuzzy Set

Intrusion detection based on improved fuzzy C-means algorithm

Masquerade Detection Based on Shell Commands and High-Order Markov Chain Models

Method for Masquerade Intrusion Detection Based on HMM and Genetic Algorithm

Intrusion detection and defending based on fuzzy patterns recognition

Network Intrusion Detection Method Based on Rough Set Theory

Research on Intrusion Scenarios Building Based on Multiple Hypothesis Tracking

A variable-length model for masquerade detection

Ontology-Based Fraud Detection

Modeling User Network Behavior Based on Network Packet Sketches for Masquerade Detection

A co-occurrence matrix based masquerade detection method in in-vehicle network

Anomaly-based Intrusion Detection System Using Fuzzy Logic

Malware traffic detection based on type II fuzzy recognition

Current Studies On Intrusion Detection System, Genetic Algorithm And Fuzzy Logic

Hybrid‐triggered based reliable filter design for interval type‐2 fuzzy system under deception attacks and missing measurements

Disturbance Observer-Based H ∞ Control for Interval Type-2 Fuzzy Hidden Markov Jump Systems Subject to Deception Attacks

A Representing Matrix for Intrusion Signatures Based on Fuzzy Comprehensive Evaluation

ICDF: Intrusion collaborative detection framework based on confidence

A Multi-level Random Forest Model-Based Intrusion Detection Using Fuzzy Inference System for Internet of Things Networks

Interval-valued possibilistic fuzzy C-means clustering algorithm