Abstract:Recently machine learning-based intrusion detection approaches have been subjected to extensive researches because they can detect both misuse and anomaly. In this paper, rough set classification (RSC), a modern learning algorithm, is used to rank the features extracted for detecting intrusions and generate intrusion detection models. Feature ranking is a very critical step when building the model. RSC performs feature ranking before generating rules, and converts the feature ranking to minimal hitting set problem addressed by using genetic algorithm (GA). This is done in classical approaches using Support Vector Machine (SVM) by executing many iterations, each of which removes one useless feature. Compared with those methods, our method can avoid many iterations. In addition, a hybrid genetic algorithm is proposed to increase the convergence speed and decrease the training time of RSC. The models generated by RSC take the form of “IF-THEN” rules, which have the advantage of explication. Tests and comparison of RSC with SVM on DARPA benchmark data showed that for Probe and DoS attacks both RSC and SVM yielded highly accurate results (greater than 99% accuracy on testing set).

The Application of Association Rules to SVM Intrusion Detection

Association rules extraction based on support vector machines

Research on SVM integration for intelligent sensor systen

Application of Support Vector Machine in the Intrusion Detection System

A Rough Set and SVM Based Intrusion Detection Classifier

An Online Rule Generation Model for Intrusion Detection

Intrusion Detection System Based on Association Rules

Learning Automata Based SVM for Intrusion Detection

Extracting Association Classification Rules from RBF Kernel

Fusion of rough set theory and linear SVM for intrusion detection system

Intrusion Detection Based on Improved SVM Algorithm

An Intrusion Detection Method Based on Rough Set and Svm Algorithm

The Application of an Improved Temporal Algorithm of Association Rules to Intrusion Detection

Detect Intrusion Using Rough Set and Support Vector Machine

Research on Application of Support Vector Machine in Intrusion Detection

Study on intrusion detection algorithm based on rough set theory and improved LSSVM

Application of Association Rules of Data Mining in IDS

Intrusion Detection Using Rough Set Classification

Intrusion Detection Based on Support Vector Machine Ensemble with Bagging

On The Efficiency Of Support Vector Classifiers For Intrusion Detection

Intrusion detection using SVM