Abstract:Efficiently detecting network intrusions requires the gathering of sensitive information. This means that one has to collect large amounts of network transactions including high details of recent network transactions. Assessments based on meta-heuristic anomaly are important in the intrusion related network transaction data’s exploratory analysis. These assessments are needed to make and deliver predictions related to the intrusion possibility based on the available attribute details that are involved in the network transaction. We were able to utilize the NSL-KDD data set, the binary and multiclass problem with a 20% testing dataset. This paper develops a new hybrid model that can be used to estimate the intrusion scope threshold degree based on the network transaction data’s optimal features that were made available for training. The experimental results revealed that the hybrid approach had a significant effect on the minimisation of the computational and time complexity involved when determining the feature association impact scale. The accuracy of the proposed model was measured as 99.81% and 98.56% for the binary class and multiclass NSL-KDD data sets, respectively. However, there are issues with obtaining high false and low false negative rates. A hybrid approach with two main parts is proposed to address these issues. First, data needs to be filtered using the Vote algorithm with Information Gain that combines the probability distributions of these base learners in order to select the important features that positively affect the accuracy of the proposed model. Next, the hybrid algorithm consists of following classifiers: J48, Meta Pagging, RandomTree, REPTree, AdaBoostM1, DecisionStump and NaiveBayes. Based on the results obtained using the proposed model, we observe improved accuracy, high false negative rate, and low false positive rule.

Useful anomaly intrusion detection method using multiple-instance learning

A Mixed Intrusion Detection System Utilizing K-means and Extreme Gradient Boosting

A Novel Intrusion Detection System Based on an Optimal Hybrid Kernel Extreme Learning Machine

Multiple kernel learning method for network anomaly detection

An Optimized Anomaly Intrusion Detection Scheme Using KNN Algorithm

An Anomaly Intrusion Detection Method Based on Shell Commands

Anomaly Intrusion Detection Using One Class Svm

Anomaly-Based Intrusion Detection System Design Using Machine Learning Methods

A hybrid unsupervised clustering-based anomaly detection method

Novel Machine Learning Techniques for Anomaly Intrusion Detection.

An Anomaly Intrusion Detection Technique Based on Dual V Support Vector Machine

A Hidden Markov Models-Based Anomaly Intrusion Detection Method

Technique of Anomaly Intrusion Detection Based on Neural Network and System Calls

A HMM-based Method for Anomaly Detection

Anomaly based multi-stage attack detection method

An Anomaly Intrusion Detection Model Based on Limited Labeled Instances

A Hybrid Deep Learning Anomaly Detection Framework for Intrusion Detection

A Novel Unsupervised Anomaly Detection Approach for Intrusion Detection System

Anomaly-based intrusion detection system through feature selection analysis and building hybrid efficient model

A Rough Set Theory Based Method for Anomaly Intrusion Detection in Computer Network Systems

A High-Performance Intrusion Detection Method Based on Combining Supervised and Unsupervised Learning