Abstract:Intrusion detection in computer networks is of great importance because of its effects on the different communication and security domains. The detection of network intrusion is a challenge. Moreover, network intrusion detection remains a challenging task as a massive amount of data is required to train the state-of-the-art machine learning models to detect network intrusion threats. Many approaches have already been proposed recently on network intrusion detection. However, they face critical challenges owing to the continuous increase in new threats that current systems do not understand. This paper compares multiple techniques to develop a network intrusion detection system. Optimum features are selected from the dataset based on the correlation between the features. Furthermore, we propose an AdaBoost-based approach for network intrusion detection based on these selected features and present its detailed functionality and performance. Unlike most previous studies, which employ the KDD99 dataset, we used a recent and comprehensive UNSW-NB 15 dataset for network anomaly detection. This dataset is a collection of network packets exchanged between hosts. It comprises 49 attributes, including nine types of threats such as DoS, Fuzzers, Exploit, Worm, shellcode, reconnaissance, generic, and analysis Backdoor. In this study, we employ SVM and MLP for comparison. Finally, we propose AdaBoost based on the decision tree classifier to classify normal activity and possible threats. We monitored the network traffic and classified it into either threats or non-threats. The experimental findings showed that our proposed method effectively detects different forms of network intrusions on computer networks and achieves an accuracy of 99.3% on the UNSW-NB15 dataset. The proposed system will be helpful in network security applications and research domains.

SVM Classification-Based Intrusion Detection System

Detection Method of Computer Worms Based on SVM

Multi-agent based hybrid Intrusion detection system

An Intrusion Detection System Based On System Call

Real-time intrusion detection system based on one-class SVM

An Improved Support Vector Machine Attack Detection Algorithm for Industry Controls System

An Intrusion Alarming System Based on Self-Similarity of Network Traffic

An SVM-based machine learning method for accurate internet traffic classification

SVM-based Remote Virtual Machine Detection

Intrusion detection using SVM

Analysis of Support Vector Machine-based Intrusion Detection Techniques

HC-DTTSVM: A Network Intrusion Detection Method Based on Decision Tree Twin Support Vector Machine and Hierarchical Clustering

Accurate Classification of the Internet Traffic Based on the SVM Method

Intrusion Behavior Classification Method Applied in a Perimeter Security Monitoring System.

A Novel Method for Feature Learning and Network Intrusion Classification

An Efficient Network Intrusion Detection and Classification System

A Machine Learning Based Intrusion Detection System for Software Defined 5 G Network

Detection and Classification of Advanced Persistent Threats and Attacks Using the Support Vector Machine

A new intrusion detection system based on SVM–GWO algorithms for Internet of Things

Intrusion Detection Systems Using Support Vector Machines on the KDDCUP'99 and NSL-KDD Datasets: A Comprehensive Survey