A fast instance reduction algorithm for intrusion detection scenarios. (July 2022)

• Record Type: Journal Article
• Authors: Herrera-Semenets, Vitali; Hernández-León, Raudel; van den Berg, Jan
• Is Part Of: Computers & electrical engineering. Volume 101(2022)
• Publication Date: 2022-07
• Subjects: Instance selection -- Data reduction -- Intrusion detection -- Data preprocessing -- Data mining -- Supervised classification; Computer engineering -- Periodicals; Electrical engineering -- Periodicals; Electrical engineering -- Data processing -- Periodicals; Ordinateurs -- Conception et construction -- Périodiques; Électrotechnique -- Périodiques; Électrotechnique -- Informatique -- Périodiques; Computer engineering; Electrical engineering; Electrical engineering -- Data processing; Periodicals; Electronic journals; 621.302854
• DOI: 10.1016/j.compeleceng.2022.107963
• Languages: English
• ISSNs: 0045-7906

Abstract

Abstract: We live in a world that is being driven by data. This leads to challenges of extracting and analyzing knowledge from large volumes of data. An example of such a challenge is intrusion detection. Intrusion detection data sets are characterized by huge volumes, which affects the learning of the classifier. So there is a need to reduce the size of the training sets. Fortunately, inspection and analysis of available intrusion detection data sets showed that many instances are very similar and do not provide relevant information to the classification process. This prompted to look for possibilities to use a fast algorithm that, as much as possible, removes similar instances in intrusion detection data sets while enforcing the detection rate. In this work, a new fast instance reduction algorithm is presented. The proposed algorithm provides greater efficiency during the training stage, without significantly affecting the efficacy during the intrusion detection task. Graphical abstract: Highlights: A novel fast instance reduction algorithm for intrusion detection is presented. Includes the k-Means algorithm as part of the strategy to select similar instances. Efficiently identifies similar instances to be removed from the data set. Provides better efficacy and efficiency than other reported algorithms. Shows good performance with low computing resources.