A universal intelligent method for intrusion detection. Issue 1 (3rd April 2022)

• Record Type: Journal Article
• Authors: Wang, Yong; Xi, Jinsong; Zhong, Meiling
• Is Part Of: Journal of cyber security technology. Volume 6:Issue 1/2(2022)
• Page Start: 91
• Page End: 111
• Publication Date: 2022-04-03
• Subjects: Attribute reduction -- selective ensemble -- KDDCUP99 -- CICIDS2017 -- ADFA-LD; Computer security -- Periodicals; Data encryption (Computer science) -- Periodicals; 005.805
• DOI: 10.1080/23742917.2022.2070345
• Languages: English
• ISSNs: 2374-2917

Abstract

ABSTRACT: Machine learning algorithms have been widely used in the field of intrusion detection, which effectively improves the detection effect. However, with changeable attack methods and the increasingly complex data, which may make detection inefficient. Therefore, in this paper, we propose an intrusion detection method which can effectively deal with many kinds of attack scenarios. Firstly, the data is preprocessed by data selection or transformation, numerical, normalization, k-classification, uniqueness and missing data processing, and then the RFSGA algorithm is formed by combining ReliefF, Relative Rough Set (RRS) and genetic algorithm (GA) for attribute reduction. The learning model is constructed by using the improved clustering method, in which we apply genetic algorithm for selecting the optimal super parameters of each cluster. Finally, we use KDDCUP99, CICIDS2017 and ADFA-LD to verify the performance of the proposed method. In terms of accuracy (acc), F1 value (f1) and the corresponding detection time (time), simulation results prove that the proposed method has obvious advantages in comparison with the algorithm before improvement and similar studies.