Wrapper feature selection method based differential evolution and extreme learning machine for intrusion detection system. (December 2022)

• Record Type: Journal Article
• Authors: Al-Yaseen, Wathiq Laftah; Idrees, Ali Kadhum; Almasoudy, Faezah Hamad
• Is Part Of: Pattern recognition. Volume 132(2022)
• Publication Date: 2022-12
• Subjects: Intrusion detection system (IDS) -- Feature selection -- Differential evolution (DE) -- Extreme learning machine (ELM) -- NSL-KDD; Pattern perception -- Periodicals; Perception des structures -- Périodiques; Patroonherkenning; 006.4
• DOI: 10.1016/j.patcog.2022.108912
• Languages: English
• ISSNs: 0031-3203

Abstract

Highlights: A hybrid Machine Learning (ML) approach for an efficient wrapper feature selection is proposed for enhancing the performance and reducing the computation time of IDS while increasing the accuracy to detect the intruder in IoT networks. The hybrid ML method consists of two techniques: Differential Evolution (DE) and Extreme Learning Machine (ELM). The DE is responsible for choosing the beneficial features while the ELM is employed to assess the selected features. Extensive experiments are implemented to evaluate the proposed approach using different performance metrics. In addition, to verify the efficiency of proposed model, the comparison is achieved with some related existing methods such as CFS + SVM [20], CFS + ANN [19], GA + Bagging [18], CFS + RF [30], and Chi-squared + RF [30] . Abstract: The intrusion detection system (IDS) has gained a rapid increase of interest due to its widely recognized potential in various security fields, however, it suffers from several challenges. Different network datasets have several redundant and irrelevant features that affect the decision of the IDS classifier. Therefore, it is essential to decrease these features to improve the system performance. In this paper, an efficient wrapper feature selection method is proposed for improving the performance and decreasing the processing time of the IDS. The proposed approach employs a differential evaluation algorithm to select the useful features whilst the extreme learning machine classifier is applied after feature selection to evaluate the selected features. Many experiments are performed using the full NSL-KDD dataset to evaluate the performance of the proposed method. The results prove that the proposed approach can efficiently reduce the features, increase the accuracy, reduce the false alarm rates, and improve the processing time of the IDS in comparison to other recent related works.