Abstract:In recent years, intrusion detection has emerged as an important technique for network security. Due to the large volumes of security audit data as well as complex and dynamic properties of intrusion behaviors, to optimize the performance of intrusion detection systems (IDSs) becomes an important open problem. In this paper, a general framework of adaptive intrusion detection based on machine learning is presented. In the framework, three perspectives of challenging problems are explored, which include feature extraction, classifier construction and pattern prediction for sequential data. It is illustrated that the three perspectives of research challenges are mainly suitable for machine learning methods using unsupervised, supervised and reinforcement learning algorithms, respectively. Several recently developed machine learning algorithms, including a multi-class support vector machine with principal component analysis (PCA) for feature reduction and a reinforcement learning algorithm for sequential prediction, are applied and evaluated both on network-based traffic data and on host-based program behaviors. Experiments on the KDD99 intrusion detection data set and the system call data from University of New Mexico show very promising results for the machine learning approaches to adaptive intrusion detection. Some directions for future research works are also discussed.

Overview Of Data Mining Based Adaptive Intrusion Detection Techniques

Study of Adaptive Intrusion Detection with Data Mining

Research on Data Mining-based Intrusion Detection in Real-time Environment

Design and Implementation of the Adaptive Intrusion Detection Framework Based on Data Mining

Research of Outlier Mining Based Adaptive Intrusion Detection Techniques

Applications of data mining to network intrusion detection

A Data Mining Based Intrusion Detection Model

Detection Approach for Malicious Behaviors Based on Data Mining

Intrusion Scenarios Detection Based on Data Mining

Data Mining-Based Method on Improving of Intrusion Detection Precision

Research on Principle Techniques for Network Intrusion Detection Based on Data Mining and Analysis Approach

Hybrid Intrusion Detection Based on Data Mining

Study of Data Mining in Intrusion Detection

An intrusion detection approach based on data mining

An Overview of Intrusion Detection Techniques Based on Machine Learning

An New Agent Based Distributed Adaptive Intrusion Detection System

Adaptive Intrusion Detection Based on Machine Learning : Feature Extraction , Classifier Construction and Sequential Pattern Prediction

Research on Network Intrusion Detection Based on Data Mining

A Data Mining Based Design for the Detection Engine of the Intrusion Detection System

MA-IDS: A Distributed Intrusion Detection System Based on Data Mining

An Intrusion Detection Model Based on Data Mining over Data