Abstract:The expeditious growth of the World Wide Web and the rampant flow of network traffic have resulted in a continuous increase of network security threats. Cyber attackers seek to exploit vulnerabilities in network architecture to steal valuable information or disrupt computer resources. Network Intrusion Detection System (NIDS) is used to effectively detect various attacks, thus providing timely protection to network resources from these attacks. To implement NIDS, a stream of supervised and unsupervised machine learning approaches is applied to detect irregularities in network traffic and to address network security issues. Such NIDSs are trained using various datasets that include attack traces. However, due to the advancement in modern-day attacks, these systems are unable to detect the emerging threats. Therefore, NIDS needs to be trained and developed with a modern comprehensive dataset which contains contemporary common and attack activities. This paper presents a framework in which different machine learning classification schemes are employed to detect various types of network attack categories. Five machine learning algorithms: Random Forest, Decision Tree, Logistic Regression, K-Nearest Neighbors and Artificial Neural Networks, are used for attack detection. This study uses a dataset published by the University of New South Wales (UNSW-NB15), a relatively new dataset that contains a large amount of network traffic data with nine categories of network attacks. The results show that the classification models achieved the highest accuracy of 89.29% by applying the Random Forest algorithm. Further improvement in the accuracy of classification models is observed when Synthetic Minority Oversampling Technique (SMOTE) is applied to address the class imbalance problem. After applying the SMOTE, the Random Forest classifier showed an accuracy of 95.1% with 24 selected features from the Principal Component Analysis method.

Identification of Information Security Threats Using Data Mining Approach in Campus Network

Identification and mitigation of the vulnerability of web applications in institutions of higher education

An integrated intrusion detection system using correlation‐based attribute selection and artificial neural network

Network intrusion detection using oversampling technique and machine learning algorithms

Research on campus network security protection system framework based on cloud data and intrusion detection algorithm

A novel way to classify passenger data using Naïve Bayes algorithm (A real time anti-terrorism approach)

Information security analysis on physical security in university x using maturity model

An integrated rule based intrusion detection system: analysis on UNSW-NB15 data set and the real time online dataset

An Analysis of the KDD99 and UNSW-NB15 Datasets for the Intrusion Detection System

Towards Identifying True Threat From Network Security Data

Wi-Fi Network Analysis Of University Campus

Research on Principle Techniques for Network Intrusion Detection Based on Data Mining and Analysis Approach

An Efficient Network Intrusion Detection and Classification System

Implementing Snort Intrusion Prevention System (IPS) for Network Forensic Analysis

Network intrusion detection system: machine learning approach

An Artificial Intelligence-based, Big Data-aware, Long-lasting Security Solution for the Internet of Things

Unsw-Nb15 Dataset and Machine Learning Based Intrusion Detection Systems

Information Security Risks Assessment: A Case Study

Enhanced Intrusion Detection Systems Performance with UNSW-NB15 Data Analysis

Exploiting SNMP-MIB Data to Detect Network Anomalies using Machine Learning Techniques

Intrusion Detection of NSM Based DoS Attacks Using Data Mining in Smart Grid