入侵检测系统

IF 1.3 4区 计算机科学 Q3 COMPUTER SCIENCE, INFORMATION SYSTEMS Journal of Database Management Pub Date : 2024-02-14 DOI:10.1142/9781848164482_0004
Sneh Lata Pundir, Sang Min Lee, Dong Seong Kim, Ji Ho Kim
{"title":"入侵检测系统","authors":"Sneh Lata Pundir, Sang Min Lee, Dong Seong Kim, Ji Ho Kim","doi":"10.1142/9781848164482_0004","DOIUrl":null,"url":null,"abstract":"The use of encrypted data, the diversity of new protocols, and the surge in the number of malicious activities worldwide have posed new challenges for intrusion detection systems (IDS). In this scenario, existing signature-based IDS are not performing well. Various researchers have proposed machine learning-based IDS to detect unknown malicious activities based on behaviour patterns. Results have shown that machine learning-based IDS perform better than signature-based IDS (SIDS) in identifying new malicious activities in the communication network. In this paper, the authors have analyzed the IDS dataset that contains the most current common attacks and evaluated the performance of network intrusion detection systems by adopting two data resampling techniques and 10 machine learning classifiers. It has been observed that the top three IDS models—KNeighbors, XGBoost, and AdaBoost—outperform binary-class classification with 99.49%, 99.14%, and 98.75% accuracy, and XGBoost, KNneighbors, and GaussianNB outperform in multi-class classification with 99.30%, 98.88%, and 96.66% accuracy.","PeriodicalId":51086,"journal":{"name":"Journal of Database Management","volume":null,"pages":null},"PeriodicalIF":1.3000,"publicationDate":"2024-02-14","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":"191","resultStr":"{\"title\":\"Intrusion Detection System\",\"authors\":\"Sneh Lata Pundir, Sang Min Lee, Dong Seong Kim, Ji Ho Kim\",\"doi\":\"10.1142/9781848164482_0004\",\"DOIUrl\":null,\"url\":null,\"abstract\":\"The use of encrypted data, the diversity of new protocols, and the surge in the number of malicious activities worldwide have posed new challenges for intrusion detection systems (IDS). In this scenario, existing signature-based IDS are not performing well. Various researchers have proposed machine learning-based IDS to detect unknown malicious activities based on behaviour patterns. Results have shown that machine learning-based IDS perform better than signature-based IDS (SIDS) in identifying new malicious activities in the communication network. In this paper, the authors have analyzed the IDS dataset that contains the most current common attacks and evaluated the performance of network intrusion detection systems by adopting two data resampling techniques and 10 machine learning classifiers. It has been observed that the top three IDS models—KNeighbors, XGBoost, and AdaBoost—outperform binary-class classification with 99.49%, 99.14%, and 98.75% accuracy, and XGBoost, KNneighbors, and GaussianNB outperform in multi-class classification with 99.30%, 98.88%, and 96.66% accuracy.\",\"PeriodicalId\":51086,\"journal\":{\"name\":\"Journal of Database Management\",\"volume\":null,\"pages\":null},\"PeriodicalIF\":1.3000,\"publicationDate\":\"2024-02-14\",\"publicationTypes\":\"Journal Article\",\"fieldsOfStudy\":null,\"isOpenAccess\":false,\"openAccessPdf\":\"\",\"citationCount\":\"191\",\"resultStr\":null,\"platform\":\"Semanticscholar\",\"paperid\":null,\"PeriodicalName\":\"Journal of Database Management\",\"FirstCategoryId\":\"94\",\"ListUrlMain\":\"https://doi.org/10.1142/9781848164482_0004\",\"RegionNum\":4,\"RegionCategory\":\"计算机科学\",\"ArticlePicture\":[],\"TitleCN\":null,\"AbstractTextCN\":null,\"PMCID\":null,\"EPubDate\":\"\",\"PubModel\":\"\",\"JCR\":\"Q3\",\"JCRName\":\"COMPUTER SCIENCE, INFORMATION SYSTEMS\",\"Score\":null,\"Total\":0}","platform":"Semanticscholar","paperid":null,"PeriodicalName":"Journal of Database Management","FirstCategoryId":"94","ListUrlMain":"https://doi.org/10.1142/9781848164482_0004","RegionNum":4,"RegionCategory":"计算机科学","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":null,"EPubDate":"","PubModel":"","JCR":"Q3","JCRName":"COMPUTER SCIENCE, INFORMATION SYSTEMS","Score":null,"Total":0}
引用次数: 191

摘要

加密数据的使用、新协议的多样性以及全球恶意活动数量的激增,给入侵检测系统(IDS)带来了新的挑战。在这种情况下,现有的基于签名的 IDS 表现不佳。许多研究人员提出了基于机器学习的 IDS,以根据行为模式检测未知的恶意活动。研究结果表明,在识别通信网络中新的恶意活动方面,基于机器学习的 IDS 比基于签名的 IDS(SIDS)表现更好。在本文中,作者分析了包含当前最常见攻击的 IDS 数据集,并采用两种数据重采样技术和 10 种机器学习分类器评估了网络入侵检测系统的性能。结果表明,IDS 的前三名模型--KNeighbors、XGBoost 和 AdaBoost 在二类分类中的准确率分别为 99.49%、99.14% 和 98.75%,而 XGBoost、KNneighbors 和 GaussianNB 在多类分类中的准确率分别为 99.30%、98.88% 和 96.66%。
本文章由计算机程序翻译,如有差异,请以英文原文为准。
查看原文
分享 分享
微信好友 朋友圈 QQ好友 复制链接
本刊更多论文
Intrusion Detection System
The use of encrypted data, the diversity of new protocols, and the surge in the number of malicious activities worldwide have posed new challenges for intrusion detection systems (IDS). In this scenario, existing signature-based IDS are not performing well. Various researchers have proposed machine learning-based IDS to detect unknown malicious activities based on behaviour patterns. Results have shown that machine learning-based IDS perform better than signature-based IDS (SIDS) in identifying new malicious activities in the communication network. In this paper, the authors have analyzed the IDS dataset that contains the most current common attacks and evaluated the performance of network intrusion detection systems by adopting two data resampling techniques and 10 machine learning classifiers. It has been observed that the top three IDS models—KNeighbors, XGBoost, and AdaBoost—outperform binary-class classification with 99.49%, 99.14%, and 98.75% accuracy, and XGBoost, KNneighbors, and GaussianNB outperform in multi-class classification with 99.30%, 98.88%, and 96.66% accuracy.
求助全文
通过发布文献求助,成功后即可免费获取论文全文。 去求助
来源期刊
Journal of Database Management
Journal of Database Management 工程技术-计算机:软件工程
CiteScore
4.20
自引率
23.10%
发文量
24
期刊介绍: The Journal of Database Management (JDM) publishes original research on all aspects of database management, design science, systems analysis and design, and software engineering. The primary mission of JDM is to be instrumental in the improvement and development of theory and practice related to information technology, information systems, and management of knowledge resources. The journal is targeted at both academic researchers and practicing IT professionals.
期刊最新文献
Identifying Alternative Options for Chatbots With Multi-Criteria Decision-Making A Machine Learning and Large Language Model-Integrated Approach to Research Project Evaluation Examining the Usefulness of Customer Reviews for Mobile Applications Intrusion Detection System Intrusion Detection System
×
引用
GB/T 7714-2015
复制
MLA
复制
APA
复制
导出至
BibTeX EndNote RefMan NoteFirst NoteExpress
×
×
提示
您的信息不完整,为了账户安全,请先补充。
现在去补充
×
提示
您因"违规操作"
具体请查看互助需知
我知道了
×
提示
现在去查看 取消
×
提示
确定
0
微信
客服QQ
Book学术公众号 扫码关注我们
反馈
×
意见反馈
请填写您的意见或建议
请填写您的手机或邮箱
已复制链接
已复制链接
快去分享给好友吧!
我知道了
×
扫码分享
扫码分享
Book学术官方微信
Book学术文献互助
Book学术文献互助群
群 号:481959085
Book学术
文献互助 智能选刊 最新文献 互助须知 联系我们:info@booksci.cn
Book学术提供免费学术资源搜索服务,方便国内外学者检索中英文文献。致力于提供最便捷和优质的服务体验。
Copyright © 2023 Book学术 All rights reserved.
ghs 京公网安备 11010802042870号 京ICP备2023020795号-1