Abstract:Due to the size and nature of intrusion detection datasets, intrusion detection systems (IDS) typically take high computational complexity to examine features of data and identify intrusive patterns. Data preprocessing techniques such as feature selection can be used to reduce such complexity by eliminating irrelevant and redundant features in the dataset. The objective of this study is to analyze the efficiency and effectiveness of some feature selection approaches namely, wrapper-based and filter-based modeling approaches. To achieve that, a hybrid of feature selection algorithm in combination with wrapper and filter selection processes is designed. We propose a wrapper-based hybrid intrusion detection modeling with a decision tree algorithm to guide the selection process. Five machine learning algorithms are used on the wrapper and filter-based feature selection methods to build IDS models using the UNSW-NB15 dataset. The three filter-based methods namely, information gain, gain ratio, and relief are used for comparison to determine the efficiency and effectiveness of the proposed approach. Furthermore, a fair comparison with other state-of-the-art intrusion detection approaches is also performed. The experimental results show that our approach is quite effective in comparison to state-of-the-art works, however, it takes high computational time in comparison to the filter-based methods whilst achieves similar results. Our work also revealed unobserved issues about the conformity of the UNSW-NB15 dataset.

An Intrusion Detection Method Based on Principal Component Analysis and Decision Tree

Intrusion Detection Feature Selection Method Based on Principal Component Analysis

An adaptive network intrusion detection method based on PCA and support vector machines

Intrusion detection algorithm based on improved principal component analysis

A Hybrid Intrusion Detection with Decision Tree for Feature Selection

An Ensemble Approach for Feature Selection and Classification in Intrusion Detection Using Extra-Tree Algorithm

A Combined Feature Selection Method Based on Clustering in Intrusion Detection

A BOOSTING APPROACH FOR INTRUSION DETECTION

A Novel Intrusion Detection Method Based on Principle Component Analysis in Computer Security

A Hybrid Method for Intrusion Detection with Ga-Based Feature Selection

Modified Mutual Information-based Feature Selection for Intrusion Detection Systems in Decision Tree Learning.

An Intrusion Detection Feature Selection Method Based on Improved Mutual Information

A Hybrid Visualizing Approach Based on Adaptive Neuro-fuzzy Inference System, Decision Tree, and K-means for Intrusion Detection

Intrusion detection based on hybrid metaheuristic feature selection

SSA-CFS:An Effective Feature Selection Method for Intrusion Detection System

An intelligent algorithm with feature selection and decision rules applied to anomaly intrusion detection

Implement an Intrusion Detection System Utilizing Machine Learning and Principal Component Analysis

Intrusion Detection System Based on Feature Selection and Support Vector Machine

An Integrated Feature Extraction Based on Principal Components and Deep Auto Encoder with Extra Tree for Intrusion Detection Systems

A multiple-level hybrid intrusion detection system based on hierarchical clustering and decision trees

A hybrid feature selection for network intrusion detection systems: Central points