Abstract:Despite the great developments in information technology, particularly the Internet, computer networks, global information exchange, and its positive impact in all areas of daily life, it has also contributed to the development of penetration and intrusion which forms a high risk to the security of information organizations, government agencies, and causes large economic losses. There are many techniques designed for protection such as firewall and intrusion detection systems (IDS). IDS is a set of software and/or hardware techniques used to detect hacker's activities in computer systems. Two types of anomalies are used in IDS to detect intrusive activities different from normal user behavior. Misuse relies on the knowledge base that contains all known attack techniques and intrusion is discovered through research in this knowledge base. Artificial intelligence techniques have been introduced to improve the performance of these systems. The importance of IDS is to identify unauthorized access attempting to compromise confidentiality, integrity or availability of the computer network. This paper investigates the Intrusion Detection (ID) problem using three machine learning algorithms namely, BayesNet algorithm, Multi-Layer Perceptron (MLP), and Support Vector Machine (SVM). The algorithms are applied on a real, Management Information Based (MIB) dataset that is collected from real life environment. To enhance the detection process accuracy, a set of feature selection approaches is used; Infogain (IG), ReleifF (RF), and Genetic Search (GS). Our experiments show that the three feature selection methods have enhanced the classification performance. GS with bayesNet, MLP and SVM give high accuracy rates, more specifically the BayesNet with the GS accuracy rate is 99.9%.

An intelligent algorithm with feature selection and decision rules applied to anomaly intrusion detection

A Mixed Intrusion Detection System Utilizing K-means and Extreme Gradient Boosting

A Novel Intrusion Detection System Based on an Optimal Hybrid Kernel Extreme Learning Machine

An Intrusion Detection Method Based on Principal Component Analysis and Decision Tree

An intelligent intrusion detection system (IDS) for anomaly and misuse detection in computer networks

A many-objective integrated evolutionary algorithm for feature selection in anomaly detection

An Ensemble Approach for Feature Selection and Classification in Intrusion Detection Using Extra-Tree Algorithm

Anomaly-based intrusion detection system based on feature selection and majority voting

An improved NSGA-III algorithm for feature selection used in intrusion detection

Anomaly-Based Intrusion Detection System using Supervised Learning Algorithm Artificial Neural Network and Ant Colony Optimization with Feature Selection

A Hybrid Visualizing Approach Based on Adaptive Neuro-fuzzy Inference System, Decision Tree, and K-means for Intrusion Detection

Intrusion detection system using classification algorithms with feature selection mechanism over real-time data traffic

Building an Effective Intrusion Detection System by Using Hybrid Data Optimization Based on Machine Learning Algorithms

Borderline SMOTE Algorithm and Feature Selection-Based Network Anomalies Detection Strategy

Machine learning to improve the performance of anomaly-based network intrusion detection in big data

Performance Analysis of Anomaly-Based Network Intrusion Detection Using Feature Selection and Machine Learning Techniques

An empirical evaluation for the intrusion detection features based on machine learning and feature selection methods

Impact of Feature Selection Methods on Data Classification for IDS

Intrusion detection system over real-time data traffic using machine learning methods with feature selection approaches

Performance evaluation of Machine learning algorithms for Intrusion Detection System

Anomaly-Based Intrusion Detection System Design Using Machine Learning Methods