Abstract:Intrusion detection systems, also known as IDSs, are widely regarded as one of the most essential components of an organization's network security. This is because IDSs serve as the organization's first line of defense against several cyberattacks and are accountable for accurately detecting any possible network intrusions. Several implementations of IDSs accomplish the detection of potential threats throughout flow-based network traffic analysis. Traditional IDSs frequently struggle to provide accurate real-time intrusion detection while keeping up with the changing landscape of threat. Innovative methods used to improve IDSs' performance in network traffic analysis are urgently needed to overcome these drawbacks. In this study, we introduced a model called a deep neural decision forest (DNDF), which allows the enhancement of classification trees with the power of deep networks to learn data representations. We essentially utilized the CICIDS 2017 dataset for network traffic analysis and extended our experiments to evaluate the DNDF model's performance on two additional datasets: CICIDS 2018 and a custom network traffic dataset. Our findings showed that DNDF, a combination of deep neural networks and decision forests, outperformed reference approaches with a remarkable precision of 99.96% by using the CICIDS 2017 dataset while creating latent representations in deep layers. This success can be attributed to improved feature representation, model optimization, and resilience to noisy and unbalanced input data, emphasizing DNDF's capabilities in intrusion detection and network security solutions.

An intrusion detection method based on decision tree

Study of Adaptive Intrusion Detection with Data Mining

A Mixed Intrusion Detection System Utilizing K-means and Extreme Gradient Boosting

Research on Data Mining-based Intrusion Detection in Real-time Environment

Multi-agent based hybrid Intrusion detection system

Decision Tree Applied in Web-Based Intrusion Detection System

HIDS-DT: an Effective Hybrid Intrusion Detection System Based on Decision Tree

Network Intrusion Detection using Decision Tree and Random Forest

A hybrid interpretable deep structure based on adaptive neuro-fuzzy inference system, decision tree, and K-means for intrusion detection

HC-DTTSVM: A Network Intrusion Detection Method Based on Decision Tree Twin Support Vector Machine and Hierarchical Clustering

Network Intrusion Detection Method Based on Rough Set Theory

An Intrusion Detection Method Based on Principal Component Analysis and Decision Tree

Combining Naive Bayes and Decision Tree for Adaptive Intrusion Detection

Intrusion detection method for internet of things based on the spiking neural network and decision tree method

Deep Neural Decision Forest (DNDF): A Novel Approach for Enhancing Intrusion Detection Systems in Network Traffic Analysis

Network Intrusion Detection System Using Random Forest and Decision Tree Machine Learning Techniques

Research on Defect Detection Technology of Trusted Behavior Decision Tree Based on Intelligent Data Semantic Analysis of Massive Data

A Hybrid Visualizing Approach Based on Adaptive Neuro-fuzzy Inference System, Decision Tree, and K-means for Intrusion Detection

Intrusion detection system using classification algorithms with feature selection mechanism over real-time data traffic

An intelligent algorithm with feature selection and decision rules applied to anomaly intrusion detection

Phases vs. Levels using Decision Trees for Intrusion Detection Systems