Abstract:The semi-supervised learning (SSL) problems are often solved by graph based algorithms, semi-definite programmings etc. These methods always require high space complexities, and thus are not efficient for network intrusion detection systems. Apart from the space complexity challenge, a network intrusion detection system should be able to handle the distribution drifting of data flow as well. A common solution for this concept drift problem is by SSL. In this paper, an incremental SSL training framework is proposed to combine the low space complexity advantage of topology learning and SSL for network intrusion detection. First, the unsupervised self-organizing incremental neural network is extended to process labeled and unlabeled information incrementally. Second, a kernel function is constructed from the training results of the previous step. Finally, a kernel machine is trained with the constructed kernel function. The proposed method reduces the space complexity of SSL to the magnitude similar to supervised learning. The experiments are carried out on the NSL-KDD datasets, and the results show that the proposed method outperforms the mainstream methods such as Transductive Support Vector Machine and Label Propagation.

A Semi-Supervised Intrusion Detection Algorithm Based on Natural Neighbor

An Anomaly Intrusion Detection Algorithm Based on Semi-Supervised Clustering

A Semi-supervised Intrusion Detection Algorithm Based on Auto-encoder.

Intrusion Detection Algorithm Based on Density, Cluster Centers, and Nearest Neighbors

A Network Anomaly Detection Algorithm Based on Natural Neighborhood Graph.

Network Intrusion Detection Based on Active Semi-supervised Learning

Nearest neighbors based density peaks approach to intrusion detection

Network Anomaly Detection Based on Semi-supervised Clustering

Multilayer Intrusion Detection System Based on Semi-supervised Clustering

Research and Implementation of Unsupervised Clustering-Based Intrusion Detection

A Semi-supervised Clustering Algorithm for Network Intrusion Detection

An Effective Intrusion Detection Model Using Semi-Supervised Clustering Algorithm

A Novel Unsupervised Anomaly Detection Approach for Intrusion Detection System

Semi-supervised tri-Adaboost algorithm for network intrusion detection

Network Intrusion Detection Based on Neighborhood Rough Set and KNN

Supervised Intrusion Detection Based on Active Learning and TCM-KNN Algorithm

An Unsupervised Anomaly Intrusion Detection Algorithm Based on Swarm Intelligence

Intrusion Detection Based on Unsupervised Clustering Algorithm

An Optimized Anomaly Intrusion Detection Scheme Using KNN Algorithm

An Effective Two-Step Intrusion Detection Approach Based on Binary Classification and $k$ -NN

Incremental Semi-Supervised Kernel Construction With Self-Organizing Incremental Neural Network And Application In Intrusion Detection