Building lightweight intrusion detection system using wrapper-based feature selection mechanisms

LiYang,WangJun-Li,TianZhi-Hong,LuTian-Bo,YoungChen

IF: 5.105

2009-01-01

Computers & Security

Abstract:Intrusion Detection System (IDS) is an important and necessary component in ensuring network security and protecting network resources and network infrastructures. How to build a lightweight IDS is...

What problem does this paper attempt to address?

Group Feature Selection Via Structural Sparse Logistic Regression for IDS

Reehan Ali Shah,Yuntao Qian,Ghulam Mahdi

DOI: https://doi.org/10.1109/hpcc-smartcity-dss.2016.0089

2016-01-01

Abstract:Intrusion Detection System (IDS) may be considered one of the most important components in the domain of network security. Currently, most of the IDSs encounter some problems like feature redundancy, high-dimensional feature, overfitting and a limited number of training examples. Thus, feature selection acts as an important role in IDSs to solve the aforementioned problems. In our suggested approach, we try to address these problems via Structural Sparse Logistic Regression (SSPLR). In this paper, we propose important feature groups and individual feature selection as well as intrusions classification for IDSs. Recently, SSPLR has been used as a technique for data analysis and processing via structural sparse penalization. With SSPLR, the relation between features has been considered in the modeling. Finally, the experiments in this correspondence demonstrate that the SSPLR technique has better performance than the currently used techniques addressing the same challenge.
Feature selection for intrusion detection systems

Firuz Kamalov,Sherif Moussa,Rita Zgheib,Omar Mashaal

DOI: https://doi.org/10.1109/ISCID51228.2020.00065

2021-06-29

Abstract:In this paper, we analyze existing feature selection methods to identify the key elements of network traffic data that allow intrusion detection. In addition, we propose a new feature selection method that addresses the challenge of considering continuous input features and discrete target values. We show that the proposed method performs well against the benchmark selection methods. We use our findings to develop a highly effective machine learning-based detection systems that achieves 99.9% accuracy in distinguishing between DDoS and benign signals. We believe that our results can be useful to experts who are interested in designing and building automated intrusion detection systems.

Cryptography and Security,Machine Learning,Networking and Internet Architecture
Network Intrusion Detection Through Discriminative Feature Selection by Using Sparse Logistic Regression

Reehan Ali Shah,Yuntao Qian,Dileep Kumar,Munwar Ali,Muhammad Bux Alvi

DOI: https://doi.org/10.3390/fi9040081

2017-01-01

Future Internet

Abstract:Intrusion detection system (IDS) is a well-known and effective component of network security that provides transactions upon the network systems with security and safety. Most of earlier research has addressed difficulties such as overfitting, feature redundancy, high-dimensional features and a limited number of training samples but feature selection. We approach the problem of feature selection via sparse logistic regression (SPLR). In this paper, we propose a discriminative feature selection and intrusion classification based on SPLR for IDS. The SPLR is a recently developed technique for data analysis and processing via sparse regularized optimization that selects a small subset from the original feature variables to model the data for the purpose of classification. A linear SPLR model aims to select the discriminative features from the repository of datasets and learns the coefficients of the linear classifier. Compared with the feature selection approaches, like filter (ranking) and wrapper methods that separate the feature selection and classification problems, SPLR can combine feature selection and classification into a unified framework. The experiments in this correspondence demonstrate that the proposed method has better performance than most of the well-known techniques used for intrusion detection.
Designing accurate lightweight intrusion detection systems for IoT networks using fine-tuned linear SVM and feature selectors

Jahongir Azimjonov,Taehong Kim

DOI: https://doi.org/10.1016/j.cose.2023.103598

IF: 5.105

2024-02-01

Computers & Security

Abstract:Intrusion detection systems (IDSs) play a crucial role in ensuring the security and integrity of Internet of Things (IoT) networks by blocking unwanted packets and facilitating secure traffic flow. However, traditional IDSs based on data mining, fuzzy logic, heuristics, rough sets, or conventional machine learning (ML) techniques often lack accuracy and are not energy efficient, primarily due to inappropriate feature selection or the use of all features in datasets. To address these challenges, this study proposes a lightweight, accurate, and high-performance IDSs for IoT networks using fine-tuned Linear Support Vector Machines (LSVMs) and feature selection methods. Four feature selectors, including Importance Coefficient-, Forward- and Backward-Sequential-, and Correlation Coefficient-based approaches, were applied to identify the most important and efficient features from three datasets: KDD Cup-1999, BotIoT-2018, and N-BaIoT-2021. The fine-tuned LSVMs algorithm was then trained on subsets of the selected and full features of the datasets to detect various IoT botnet attacks. Evaluation results show that the IDS models trained with subsets of relevant features outperform those trained with the full feature sets of the datasets in terms of training and test performance and accuracy. The study concludes that it is possible to develop lightweight IDSs by training them with a reduced number of features (6) instead of using the full features (40, 15, 115) in KDD Cup-1999, BotIoT-2018, and N-BaIoT-2021, respectively. The findings highlight a potential for significantly improving the efficiency and accuracy of IDSs on IoT networks using the fine-tuned feature selectors and LSVMs.

computer science, information systems
A fast intrusion detection system based on swift wrapper feature selection and speedy ensemble classifier

Ezgi Zorarpaci

DOI: https://doi.org/10.1016/j.engappai.2024.108162

IF: 8

2024-03-10

Engineering Applications of Artificial Intelligence

Abstract:Due to the widespread use of the internet, computer network systems may be exposed to different types of attacks. For this reason, the intrusion detection systems (IDSs) are often used to protect the network systems. Network traffic data (i.e., network packets) includes many features. However, most of them are irrelevant and can lead to a decrease in the runtime and/or the detection performance of the IDS. Although various data mining methods have been applied to improve the effectiveness of IDS, research regarding IDSs having high detection rates and better runtime performance (i.e., lower computational cost) is ongoing. On the other hand, the dimensionality reduction techniques help to eliminate unnecessary features and reduce the computation time of a classification algorithm. In the literature, the feature selection methods (i.e., filter and wrapper) have been widely used for the dimensionality reduction in IDSs. Although the wrapper feature selection techniques outperform the filters, they are time-consuming. Again, the ensemble classifiers can achieve higher detection rates for IDSs compared to the stand-alone classifiers, but they require more computation time to build the model. In order to improve the runtime performance and the detection rate of IDS, a swift wrapper feature selection and a speedy ensemble classifier are proposed in this study. For the dimensionality reduction, the swift wrapper feature selection (i.e., DBDE-QDA) is used, which consists of dichotomous binary differential evolution (DBDE) and quadratic discriminant analysis (QDA). For attack detection, the speedy ensemble classifier is used, which combines Holte's 1R, random tree, and reduced error pruning tree. In the experiments, the NSL-KDD, UNSW-NB15, and CICDDoS2019 datasets are used. According to the experimental results, the proposed IDS reaches 95%–97.4%, 82.7%, and 99.5%–99.9% detection rates for the NSL-KDD, UNSW-NB15, and CICDDoS2019 datasets. In this way, the proposed IDS competes with the state-of-the-art methods in terms of detection rate and false alarm rate. In addition, the proposed IDS has a lower computational cost than the state-of-the-art methods. Moreover, DBDE-QDA reduces the dimension by 60.97%–82.92%, 73.46%, and 96.55%–98.85% for the NSL-KDD, UNSW-NB15, and CICDoS2019 datasets.

automation & control systems,computer science, artificial intelligence,engineering, electrical & electronic, multidisciplinary
Two-Tier Intrusion Detection Framework for Embedded Systems

Ming Liu,Zhi Xue,Xiangjian He

DOI: https://doi.org/10.1109/mce.2020.3048314

2020-01-01

IEEE Consumer Electronics Magazine

Abstract:The embedded system is an essential component of the Internet of Everything. Recently, host-based intrusion detection techniques have been widely applied to embedded systems effectively. However, the traditional standalone intrusion detection system has several shortcomings in terms of efficiency and scalability. In this article, a two-tier scalable intrusion detection framework is designed for embedded systems to address these shortcomings. The framework is based on Spark and is deployed in the cloud environment. The experiments show that the proposed framework can effectively improve the detection efficiency and scalability.
Intrusion Detection System Based on Choosing Characters and Weighting Characters

WANG Peng-ying,HUANG Hai,HUANG Xiao-ping

DOI: https://doi.org/10.3969/j.issn.1002-137x.2012.01.020

2012-01-01

Computer Science

Abstract:The network intrusion means are diversification.Traditional detection system can not extract feature very well.Packet is easy lost,and omission and misstatement rates are high.In order to improve the detection rate,this paper proposed an intrusion detection algorithm based on weighted feature selection.Firstly,features were extracted from network packets,then support vector machine(SVM) was used to select feature based on cross validation and calculate the feature values,lastly,intrusion detection mode was set up based on the weighted reserves features.The results of simulation experiment show that the proposed algorithm improves the intrusion detection rate.It is an effective network intrusion detection method.
Intrusion Detection System Based on Feature Selection and Support Vector Machine

Zhang Xue-qin,Gu Chun-hua,Lin Jia-jin

DOI: https://doi.org/10.1109/chinacom.2006.344739

2006-01-01

Abstract:Support vector machine (SVM) has been applied to intrusion detection system (IDS) for its abilities to perform classification and regression. But for large-scale network intrusion detection problem, since solving a support vector machine is a typical quadratic optimization problem, which is influenced by the dimension and quantity of examples, many problems arise. KDDCUP'99 was used as the experiment dataset in this paper. A feature selection technology based on Fisher score was presented and used to construct a reduced feature subset of KDDCUP'99 dataset. SVM was used as a classifier. Experiment was run. The experiment results show, using Fisher score combined with SVM to select the important features is an effective method to reduce the dimension of the example feature space, and the classification accuracy has not dramatically decreased comparing to the original feature space.
Enhancing network security with information-guided-enhanced Runge Kutta feature selection for intrusion detection

Li Yuan,Xiongjun Tian,Jiacheng Yuan,Jingyu zhang,Xiaojing Dai,Ali Asghar Heidari,Huiling Chen,Sudan Yu

DOI: https://doi.org/10.1007/s10586-024-04544-x

2024-06-16

Cluster Computing

Abstract:Intrusion detection system (IDS) classify network traffic as either threatening or normal based on data features, aiming to identify malicious activities attempting to compromise computer systems. However, the volume of intrusion-related data is increasing daily, and the redundant features within this data hinder the improvement of IDS classification performance and efficiency. This study introduces a wrapper feature selection model, denoted as bICSRUN-KNN, with Runge–kutta optimization for information-guided communication (ICSRUN) to detect system intrusions. Comparative experiments on the IEEE CEC 2014 benchmark functions demonstrate ICSRUN's superiority over other algorithms. Subsequently, comparative experiments are conducted using 12 UCI datasets, NSL-KDD, ISCX-URL-2016, ISCX-Tor-NonTor-2017, and LUFlow Network, against competing algorithms. Experimental results demonstrate that the bICSRUN-KNN model achieved remarkable accuracy rates of 98.705% and 98.341% in the binary and multiclass contexts of NSL-KDD. For ISCX-URL-2016, ISCX-Tor-NonTor-2017, and LUFlow Network, accuracy rates of 96.107%, 99.772%, and 88.748% are respectively attained.

computer science, information systems, theory & methods
Relevant Feature Selection Model Using Data Mining for Intrusion Detection System

Ayman I. Madbouly,Amr M. Gody,Tamer M. Barakat

DOI: https://doi.org/10.14445/22315381/IJETT-V9P296

2014-03-30

Abstract:Network intrusions have become a significant threat in recent years as a result of the increased demand of computer networks for critical systems. Intrusion detection system (IDS) has been widely deployed as a defense measure for computer networks. Features extracted from network traffic can be used as sign to detect anomalies. However with the huge amount of network traffic, collected data contains irrelevant and redundant features that affect the detection rate of the IDS, consumes high amount of system resources, and slowdown the training and testing process of the IDS. In this paper, a new feature selection model is proposed; this model can effectively select the most relevant features for intrusion detection. Our goal is to build a lightweight intrusion detection system by using a reduced features set. Deleting irrelevant and redundant features helps to build a faster training and testing process, to have less resource consumption as well as to maintain high detection rates. The effectiveness and the feasibility of our feature selection model were verified by several experiments on KDD intrusion detection dataset. The experimental results strongly showed that our model is not only able to yield high detection rates but also to speed up the detection process.

Cryptography and Security,Machine Learning
Lightweight Anomaly Intrusion Detection In Wireless Sensor Networks

Haiguang Chen,Peng Han,Xi Zhou,Chuanshan Gao

DOI: https://doi.org/10.1007/978-3-540-71549-8_9

2007-01-01

Abstract:Wireless Sensor Networks (WSNs) have an excellent application to monitor environments such as military surveillance and forest fire. However, WSNs are of interest to adversaries in many scenarios. They are susceptible to some types of attacks because they are deployed in open and unprotected environments. The WSNs are constituted of scarce resource devices. These security mechanisms which used for wired networks cannot be transferred directly to wireless sensor networks. In this paper we propose lightweight anomaly intrusions detection. In the scheme, we investigate different key features for WSNs and define some rules to building an efficient, accurate and effective Intrusion Detection Systems (IDSs). We also propose a moving window function method to gather the current activity data. The scheme fits the demands and restrictions of WSNs. The scheme does not need any cooperation among monitor nodes. Simulation results show that we proposed IDSs is efficient and accurate in detecting different kinds of attacks.
Deep Feature Extraction in Intrusion Detection System

Anbang Wang,Xinyu Gong,Jialiang Lu

DOI: https://doi.org/10.1109/smartcloud.2019.00028

2019-01-01

Abstract:With the development of network technology and the updating of intelligent networking devices, the variety of cyber attacks and the number of users being attacked are increasing. Intrusion Detection Systems (IDS) are commonly used in the field of network security to detect anomalous activity and behavior. Many previous works have achieved high detection accuracy on standard testing data sets by implementing mature Machine Learning (ML) algorithms. Inspired by the network ontology researches,, we propose two Long Short-Term Memory (LSTM) based IDSs with deep feature extraction: multi-class feature extraction IDS and dual-class feature extraction IDS. Through our experiments on the CICIDS2017 data set, we have found that multi-class feature extraction IDS can better identify the types of cyber attacks while the dual-class feature extraction IDS can better recall new attacks. We conclude that when the structure and characteristics of the classifier are limited, a reasonable selection of the feature extraction space can help improve the characteristics of the classifier and better achieve the downstream tasks in the security field.
Hybrid wrapper feature selection method based on genetic algorithm and extreme learning machine for intrusion detection

Elijah M. Maseno,Zenghui Wang

DOI: https://doi.org/10.1186/s40537-024-00887-9

2024-02-03

Journal Of Big Data

Abstract:Intrusion detection systems play a critical role in the mitigation of cyber-attacks on the Internet of Things (IoT) environment. Due to the integration of many devices within the IoT environment, a huge amount of data is generated. The generated data sets in most cases consist of irrelevant and redundant features that affect the performance of the existing intrusion detection systems (IDS). The selection of optimal features plays a critical role in the enhancement of intrusion detection systems. This study proposes a sequential feature selection approach using an optimized extreme learning machine (ELM) with an SVM (support vector machine) classifier. The main challenge of ELM is the selection of the input parameters, which affect its performance. In this study, the genetic algorithm (GA) is used to optimize the weights of ELM to boost its performance. After the optimization, the algorithm is applied as an estimator in the sequential forward selection (wrapper technique) to select key features. The final obtained feature subset is applied for classification using SVM. The IoT_ToN network and UNSWNB15 datasets were used to test the model's performance. The performance of the model was compared with other existing state-of-the-art classifiers such as k-nearest neighbors, gradient boosting, random forest, and decision tree. The model had the best quality of the selected feature subset. The results indicate that the proposed model had a better intrusion detection performance with 99%, and 86% accuracy for IoT_ToN network dataset and UNSWNB15 datasets, respectively. The model can be used as a promising tool for enhancing the classification performance of IDS datasets.
An Efficient Content-based Intrusion Detection System

张邈,徐辉,潘爱民

DOI: https://doi.org/10.3969/j.issn.1000-3428.2003.19.041

2003-01-01

Abstract:The efficiency of content-based intrusion detection systems, the structure of the signature library, the string matching algorithms and the analysis of application level protocols, has been regarded as the most crucial topic for extensive research. This paper introduces SpeedlDS, an efficient experimental content-based IDS. After an overview on several important aspects of design and implementation in which SpeedlDS distinguishes itself from other IDSs are particularly discussed. Experiments are also presented to test the effectiveness and results are proved promising by excelling Snort, a famous and widely used IDS.
A FEATURE SELECTION ALGORITHM DESIGN AND ITS IMPLEMENTA-TION IN INTRUSION DETECTION SYSTEM

Xiangrong Yang,Junyi Shen,杨向荣,沈钧毅

DOI: https://doi.org/10.3969/j.issn.1671-8267.2003.02.006

2003-01-01

Abstract:Objective: Present a new features selection algorithm. Methods: based on rule induction and field knowledge. Results: This algorithm can be applied in catching dataflow when detecting network intrusions, only the sub-dataset including discriminating features is catched. Then the time spend in following behavior patterns mining is reduced and the patterns mined are more precise. Conclusion: The experiment results show that the feature subset catched by this algorithm is more informative and the dataset's quantity is reduced significantly.
Novel Framework for an Intrusion Detection System Using Multiple Feature Selection Methods Based on Deep Learning

A. E. M. Eljialy,Mohammed Yousuf Uddin,Sultan Ahmad

DOI: https://doi.org/10.26599/tst.2023.9010032

2024-02-13

Tsinghua Science & Technology

Abstract:Intrusion detection systems (IDSs) are deployed to detect anomalies in real time. They classify a network's incoming traffic as benign or anomalous (attack). An efficient and robust IDS in software-defined networks is an inevitable component of network security. The main challenges of such an IDS are achieving zero or extremely low false positive rates and high detection rates. Internet of Things (IoT) networks run by using devices with minimal resources. This situation makes deploying traditional IDSs in IoT networks unfeasible. Machine learning (ML) techniques are extensively applied to build robust IDSs. Many researchers have utilized different ML methods and techniques to address the above challenges. The development of an efficient IDS starts with a good feature selection process to avoid overfitting the ML model. This work proposes a multiple feature selection process followed by classification. In this study, the Software-defined networking (SDN) dataset is used to train and test the proposed model. This model applies multiple feature selection techniques to select high-scoring features from a set of features. Highly relevant features for anomaly detection are selected on the basis of their scores to generate the candidate dataset. Multiple classification algorithms are applied to the candidate dataset to build models. The proposed model exhibits considerable improvement in the detection of attacks with high accuracy and low false positive rates, even with a few features selected.

computer science, information systems,engineering, electrical & electronic, software engineering
Building an Effective Intrusion Detection System by Using Hybrid Data Optimization Based on Machine Learning Algorithms

Jiadong Ren,Jiawei Guo,Wang Qian,Huang Yuan,Xiaobing Hao,Hu Jingjing

DOI: https://doi.org/10.1155/2019/7130868

IF: 1.968

2019-06-16

Security and Communication Networks

Abstract:Intrusion detection system (IDS) can effectively identify anomaly behaviors in the network; however, it still has low detection rate and high false alarm rate especially for anomalies with fewer records. In this paper, we propose an effective IDS by using hybrid data optimization which consists of two parts: data sampling and feature selection, called DO_IDS. In data sampling, the Isolation Forest (iForest) is used to eliminate outliers, genetic algorithm (GA) to optimize the sampling ratio, and the Random Forest (RF) classifier as the evaluation criteria to obtain the optimal training dataset. In feature selection, GA and RF are used again to obtain the optimal feature subset. Finally, an intrusion detection system based on RF is built using the optimal training dataset obtained by data sampling and the features selected by feature selection. The experiment will be carried out on the UNSW-NB15 dataset. Compared with other algorithms, the model has obvious advantages in detecting rare anomaly behaviors.

computer science, information systems,telecommunications
Comprehensive analysis and recommendation of feature evaluation measures for intrusion detection

Adel Binbusayyis,Thavavel Vaiyapuri

DOI: https://doi.org/10.1016/j.heliyon.2020.e04262

IF: 3.776

2020-07-09

Heliyon

Abstract:The revolutionary advances in network technologies have spearheaded the design of advanced cyberattacks to surpass traditional security defense with dreadful consequences. Recently, Intrusion Detection System (IDS) is considered as a pivotal element in network security infrastructures to achieve solid line of protection against cyberattacks. The prime challenges presented to IDS are curse of high dimensionality and class imbalance that tends to increase the detection time and degrade the efficiency of IDS. As a result, feature selection plays an important role in enabling to identify the most significant features for intrusion detection. Although, several feature evaluation measures are being proposed for feature selection in literature, there is no consensus on which measures are best for intrusion detection. Therein, this work aims at recommending the most appropriate feature evaluation measure for building an efficient IDS. In this direction, four filter-based feature evaluation measures that stem from different theories such as Consistency, Correlation, Information and Distance are investigated for their potential implications in enhancing the detection ability of IDS model for different classes of attacks. Along with this, the influence of the selected features on classification accuracy of an IDS model is analyzed using four different categories of classifiers namely, K-nearest neighbors (KNN), Random Forest (RF), Support Vector Machine (SVM) and Deep Belief Network (DBN). Finally, a two-step statistical significance test is conducted on the experimental results to determine which feature evaluation measure contributes statistically significant difference in IDS performance. All the experimental comparisons are performed on two benchmark intrusion detection datasets, NSL-KDD and UNSW-NB15. In these experiments, consistency measure has best influenced the IDS model in improving the detection ability with regard to detection rate (DR), false alarm rate (FAR), kappa statistics (KS) and identifying the most significant features for intrusion detection. Also, from the analysis results, it is revealed that RF is the ideal classifier to be used in conjunction with any of these four feature evaluation measures to achieve better detection accuracy than others. From the statistical results, we recommend the use of consistency measure for designing an efficient IDS in terms of DR and FAR.
Modified Aquila Optimizer Feature Selection Approach and Support Vector Machine Classifier for Intrusion Detection System

Laith Abualigah,Saba Hussein Ahmed,Mohammad H. Almomani,Raed Abu Zitar,Anas Ratib Alsoud,Belal Abuhaija,Essam Said Hanandeh,Heming Jia,Diaa Salama Abd Elminaam,Mohamed Abd Elaziz

DOI: https://doi.org/10.1007/s11042-023-17886-2

IF: 2.577

2024-01-03

Multimedia Tools and Applications

Abstract:With the ever-expanding ubiquity of the Internet, wireless networks have permeated every facet of modern life, escalating concerns surrounding network security for users. Consequently, the demand for a robust Intrusion Detection System (IDS) has surged. The IDS serves as a critical bastion within the security framework, a significance further magnified in wireless networks where intrusions may stem from the deluge of sensor data. This influx of data, however, inevitably taxes the efficiency and computational speed of IDS. To address these limitations, numerous strategies for enhancing IDS performance have been posited by researchers. This paper introduces a novel feature selection method grounded in Support Vector Machine (SVM) and harnessing the innovative modified Aquila Optimizer (mAO) for Intrusion Detection Systems in Wireless Sensor Networks. To evaluate the efficacy of our approach, we employed the KDD'99 dataset for testing and benchmarking against established methods. Multiple performance metrics, including accuracy, detection rate, false alarm rate, feature count, and execution time, were utilized for assessment. Our comparative analysis reveals the superiority of the proposed method, with standout results in terms of feature reduction, detection accuracy, and false alarm mitigation, yielding significant improvements of 11%, 98.76%, and 0.02%, respectively.

computer science, information systems, theory & methods,engineering, electrical & electronic, software engineering
Explainable Deep Learning-Based Feature Selection and Intrusion Detection Method on the Internet of Things

Xuejiao Chen,Minyao Liu,Zixuan Wang,Yun Wang

DOI: https://doi.org/10.3390/s24165223

2024-08-12

Abstract:With the rapid advancement of the Internet of Things, network security has garnered increasing attention from researchers. Applying deep learning (DL) has significantly enhanced the performance of Network Intrusion Detection Systems (NIDSs). However, due to its complexity and "black box" problem, deploying DL-based NIDS models in practical scenarios poses several challenges, including model interpretability and being lightweight. Feature selection (FS) in DL models plays a crucial role in minimizing model parameters and decreasing computational overheads while enhancing NIDS performance. Hence, selecting effective features remains a pivotal concern for NIDSs. In light of this, this paper proposes an interpretable feature selection method for encrypted traffic intrusion detection based on SHAP and causality principles. This approach utilizes the results of model interpretation for feature selection to reduce feature count while ensuring model reliability. We evaluate and validate our proposed method on two public network traffic datasets, CICIDS2017 and NSL-KDD, employing both a CNN and a random forest (RF). Experimental results demonstrate superior performance achieved by our proposed method.

Building lightweight intrusion detection system using wrapper-based feature selection mechanisms

Group Feature Selection Via Structural Sparse Logistic Regression for IDS

Feature selection for intrusion detection systems

Network Intrusion Detection Through Discriminative Feature Selection by Using Sparse Logistic Regression

Designing accurate lightweight intrusion detection systems for IoT networks using fine-tuned linear SVM and feature selectors

A fast intrusion detection system based on swift wrapper feature selection and speedy ensemble classifier

Two-Tier Intrusion Detection Framework for Embedded Systems

Intrusion Detection System Based on Choosing Characters and Weighting Characters

Intrusion Detection System Based on Feature Selection and Support Vector Machine

Enhancing network security with information-guided-enhanced Runge Kutta feature selection for intrusion detection

Relevant Feature Selection Model Using Data Mining for Intrusion Detection System

Lightweight Anomaly Intrusion Detection In Wireless Sensor Networks

Deep Feature Extraction in Intrusion Detection System

Hybrid wrapper feature selection method based on genetic algorithm and extreme learning machine for intrusion detection

An Efficient Content-based Intrusion Detection System

A FEATURE SELECTION ALGORITHM DESIGN AND ITS IMPLEMENTA-TION IN INTRUSION DETECTION SYSTEM

Novel Framework for an Intrusion Detection System Using Multiple Feature Selection Methods Based on Deep Learning

Building an Effective Intrusion Detection System by Using Hybrid Data Optimization Based on Machine Learning Algorithms

Comprehensive analysis and recommendation of feature evaluation measures for intrusion detection

Modified Aquila Optimizer Feature Selection Approach and Support Vector Machine Classifier for Intrusion Detection System

Explainable Deep Learning-Based Feature Selection and Intrusion Detection Method on the Internet of Things