Abstract:Due to the widespread use of the internet, computer network systems may be exposed to different types of attacks. For this reason, the intrusion detection systems (IDSs) are often used to protect the network systems. Network traffic data (i.e., network packets) includes many features. However, most of them are irrelevant and can lead to a decrease in the runtime and/or the detection performance of the IDS. Although various data mining methods have been applied to improve the effectiveness of IDS, research regarding IDSs having high detection rates and better runtime performance (i.e., lower computational cost) is ongoing. On the other hand, the dimensionality reduction techniques help to eliminate unnecessary features and reduce the computation time of a classification algorithm. In the literature, the feature selection methods (i.e., filter and wrapper) have been widely used for the dimensionality reduction in IDSs. Although the wrapper feature selection techniques outperform the filters, they are time-consuming. Again, the ensemble classifiers can achieve higher detection rates for IDSs compared to the stand-alone classifiers, but they require more computation time to build the model. In order to improve the runtime performance and the detection rate of IDS, a swift wrapper feature selection and a speedy ensemble classifier are proposed in this study. For the dimensionality reduction, the swift wrapper feature selection (i.e., DBDE-QDA) is used, which consists of dichotomous binary differential evolution (DBDE) and quadratic discriminant analysis (QDA). For attack detection, the speedy ensemble classifier is used, which combines Holte's 1R, random tree, and reduced error pruning tree. In the experiments, the NSL-KDD, UNSW-NB15, and CICDDoS2019 datasets are used. According to the experimental results, the proposed IDS reaches 95%–97.4%, 82.7%, and 99.5%–99.9% detection rates for the NSL-KDD, UNSW-NB15, and CICDDoS2019 datasets. In this way, the proposed IDS competes with the state-of-the-art methods in terms of detection rate and false alarm rate. In addition, the proposed IDS has a lower computational cost than the state-of-the-art methods. Moreover, DBDE-QDA reduces the dimension by 60.97%–82.92%, 73.46%, and 96.55%–98.85% for the NSL-KDD, UNSW-NB15, and CICDoS2019 datasets.

Impact of Feature Selection Methods on Data Classification for IDS

A Mixed Intrusion Detection System Utilizing K-means and Extreme Gradient Boosting

Intrusion detection system over real-time data traffic using machine learning methods with feature selection approaches

Intrusion detection system using classification algorithms with feature selection mechanism over real-time data traffic

Performance Analysis of Intrusion Detection Systems Using a Feature Selection Method on the UNSW-NB15 Dataset

Feature Selection Methods Simultaneously Improve the Detection Accuracy and Model Building Time of Machine Learning Classifiers

Statistical methods for feature selection: unlocking the key to improved accuracy

Feature Selection for Intrusion Detection Using Random Forest

An improved NSGA-III algorithm for feature selection used in intrusion detection

Using Feature Selection Enhancement to Evaluate Attack Detection in the Internet of Things Environment

An Ensemble Approach for Feature Selection and Classification in Intrusion Detection Using Extra-Tree Algorithm

A fast intrusion detection system based on swift wrapper feature selection and speedy ensemble classifier

Enhancing network security with information-guided-enhanced Runge Kutta feature selection for intrusion detection

An Intrusion Detection Feature Selection Method Based on Improved Mutual Information

Group Feature Selection Via Structural Sparse Logistic Regression for IDS

Relevant Feature Selection Model Using Data Mining for Intrusion Detection System

Building an Effective Intrusion Detection System using Unsupervised Feature Selection in Multi-objective Optimization Framework

Data Mining with Supervised Instance Selection Improves Artificial Neural Network Classification Accuracy

Enhancing Network Threat Detection with Random Forest-Based NIDS and Permutation Feature Importance

Application and Performance Analysis of Data Preprocessing for Intrusion Detection System.

Network Data Classification Mechanism for Intrusion Detection System