Lan Wang , Jialing Xu , Liyun Jia , Tao Wang , Yujie Xu , Xingchen Liu
{"title":"Multi-strategy RIME optimization algorithm for feature selection of network intrusion detection","authors":"Lan Wang , Jialing Xu , Liyun Jia , Tao Wang , Yujie Xu , Xingchen Liu","doi":"10.1016/j.cose.2025.104393","DOIUrl":null,"url":null,"abstract":"<div><div>Feature selection in network intrusion detection is an important research hotspot in network security. The performance of meta-heuristic algorithms, as one of the most effective methods for feature selection, will directly affect the solution to the problem. The RIME optimization algorithm, a novel meta-heuristic algorithm proposed in 2023 based on the physical phenomenon of rime, is suitable for intrusion detection feature selection due to its simplicity and efficiency. However, the standard RIME algorithm suffers from low convergence accuracy and a tendency to converge early, which severely limits its problem-solving ability. For this reason, this paper proposes an improved feature selection algorithm, the Multi-strategy RIME optimization algorithm (MRIME), which combines the chaotic local search strategy, an interaction mechanism, and an improved hard-rime puncture mechanism to enhance the performance of the standard RIME algorithm. The proposed MRIME algorithm has been validated through experiments on three publicly available intrusion detection datasets: UNSW-NB15, CIC-IDS-2017, and CICIoV2024. The experimental results demonstrate that MRIME outperforms existing feature selection algorithms, excelling in accuracy, precision, recall, F1 and runtime. Furthermore, MRIME has proven its adaptability to high-dimensional, low-dimensional, and large-scale datasets through scalability experiments on nine UCI datasets. These findings highlight the potential of MRIME for feature selection in intrusion detection systems.</div></div>","PeriodicalId":51004,"journal":{"name":"Computers & Security","volume":"153 ","pages":"Article 104393"},"PeriodicalIF":4.8000,"publicationDate":"2025-02-28","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":"0","resultStr":null,"platform":"Semanticscholar","paperid":null,"PeriodicalName":"Computers & Security","FirstCategoryId":"94","ListUrlMain":"https://www.sciencedirect.com/science/article/pii/S0167404825000823","RegionNum":2,"RegionCategory":"计算机科学","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":null,"EPubDate":"","PubModel":"","JCR":"Q1","JCRName":"COMPUTER SCIENCE, INFORMATION SYSTEMS","Score":null,"Total":0}
引用次数: 0
Abstract
Feature selection in network intrusion detection is an important research hotspot in network security. The performance of meta-heuristic algorithms, as one of the most effective methods for feature selection, will directly affect the solution to the problem. The RIME optimization algorithm, a novel meta-heuristic algorithm proposed in 2023 based on the physical phenomenon of rime, is suitable for intrusion detection feature selection due to its simplicity and efficiency. However, the standard RIME algorithm suffers from low convergence accuracy and a tendency to converge early, which severely limits its problem-solving ability. For this reason, this paper proposes an improved feature selection algorithm, the Multi-strategy RIME optimization algorithm (MRIME), which combines the chaotic local search strategy, an interaction mechanism, and an improved hard-rime puncture mechanism to enhance the performance of the standard RIME algorithm. The proposed MRIME algorithm has been validated through experiments on three publicly available intrusion detection datasets: UNSW-NB15, CIC-IDS-2017, and CICIoV2024. The experimental results demonstrate that MRIME outperforms existing feature selection algorithms, excelling in accuracy, precision, recall, F1 and runtime. Furthermore, MRIME has proven its adaptability to high-dimensional, low-dimensional, and large-scale datasets through scalability experiments on nine UCI datasets. These findings highlight the potential of MRIME for feature selection in intrusion detection systems.
期刊介绍:
Computers & Security is the most respected technical journal in the IT security field. With its high-profile editorial board and informative regular features and columns, the journal is essential reading for IT security professionals around the world.
Computers & Security provides you with a unique blend of leading edge research and sound practical management advice. It is aimed at the professional involved with computer security, audit, control and data integrity in all sectors - industry, commerce and academia. Recognized worldwide as THE primary source of reference for applied research and technical expertise it is your first step to fully secure systems.