Abstract:Due to the widespread use of the internet, computer network systems may be exposed to different types of attacks. For this reason, the intrusion detection systems (IDSs) are often used to protect the network systems. Network traffic data (i.e., network packets) includes many features. However, most of them are irrelevant and can lead to a decrease in the runtime and/or the detection performance of the IDS. Although various data mining methods have been applied to improve the effectiveness of IDS, research regarding IDSs having high detection rates and better runtime performance (i.e., lower computational cost) is ongoing. On the other hand, the dimensionality reduction techniques help to eliminate unnecessary features and reduce the computation time of a classification algorithm. In the literature, the feature selection methods (i.e., filter and wrapper) have been widely used for the dimensionality reduction in IDSs. Although the wrapper feature selection techniques outperform the filters, they are time-consuming. Again, the ensemble classifiers can achieve higher detection rates for IDSs compared to the stand-alone classifiers, but they require more computation time to build the model. In order to improve the runtime performance and the detection rate of IDS, a swift wrapper feature selection and a speedy ensemble classifier are proposed in this study. For the dimensionality reduction, the swift wrapper feature selection (i.e., DBDE-QDA) is used, which consists of dichotomous binary differential evolution (DBDE) and quadratic discriminant analysis (QDA). For attack detection, the speedy ensemble classifier is used, which combines Holte's 1R, random tree, and reduced error pruning tree. In the experiments, the NSL-KDD, UNSW-NB15, and CICDDoS2019 datasets are used. According to the experimental results, the proposed IDS reaches 95%–97.4%, 82.7%, and 99.5%–99.9% detection rates for the NSL-KDD, UNSW-NB15, and CICDDoS2019 datasets. In this way, the proposed IDS competes with the state-of-the-art methods in terms of detection rate and false alarm rate. In addition, the proposed IDS has a lower computational cost than the state-of-the-art methods. Moreover, DBDE-QDA reduces the dimension by 60.97%–82.92%, 73.46%, and 96.55%–98.85% for the NSL-KDD, UNSW-NB15, and CICDoS2019 datasets.

A Hybrid Intrusion Detection Method Using Improved Stacking Ensemble Algorithm and False Positive Elimination Strategy for CBTC

A Mixed Intrusion Detection System Utilizing K-means and Extreme Gradient Boosting

CBF-IDS: Addressing Class Imbalance Using CNN-BiLSTM with Focal Loss in Network Intrusion Detection System

Hybrid Intrusion Detection System for Complicated Network

Multi-agent based hybrid Intrusion detection system

Hybrid Intrusion Detection System Based on the Stacking Ensemble of C5 Decision Tree Classifier and One Class Support Vector Machine

RIDS: Towards Advanced IDS Via RNN Model and Programmable Switches Co-Designed Approaches

Work-in-Progress: Towards Real-Time IDS Via RNN and Programmable Switches Co-Designed Approach

Real-Time Intrusion Detection Based on Decision Fusion in Industrial Control Systems

Intrusion detection system based on the beetle swarm optimization and K‐RMS clustering algorithm

A fast intrusion detection system based on swift wrapper feature selection and speedy ensemble classifier

A Network Traffic Intrusion Detection Method for Industrial Control Systems Based on Deep Learning

A tree-based stacking ensemble technique with feature selection for network intrusion detection

Histone separation by high-performance liquid chromatography on C4 reverse-phase columns.

A Hybrid Intrusion Detection System Based on Scalable K-Means+ Random Forest and Deep Learning

Enhancing network security with information-guided-enhanced Runge Kutta feature selection for intrusion detection

Building an Effective Intrusion Detection System by Using Hybrid Data Optimization Based on Machine Learning Algorithms

Intrusion Detection System for Autonomous Vehicles Using Non-Tree Based Machine Learning Algorithms

A Hybrid Intrusion Detection Model Using EGA-PSO and Improved Random Forest Method

HDCBAN: Hybrid Neural Network for Network Intrusion Detection System

False Data Injection Attacks Detection Based on Stacking and MIC-DCXGB