基于特征选择的高效网络入侵检测技术

R. A. Shah, A. A. Wagan, M. Ali, K. Hussain, R. Bibi
{"title":"基于特征选择的高效网络入侵检测技术","authors":"R. A. Shah, A. A. Wagan, M. Ali, K. Hussain, R. Bibi","doi":"10.26692/surj/2019.09.77","DOIUrl":null,"url":null,"abstract":"Network Intrusion Detection System (NIDS) is one of the most significant parts of network security that can make secure transactions over a network. Despite many efforts in the field, we can observe increased sophistication and variety of attacks on networks. In such situation Machine learning (ML) based methods have emerged some of the most effective as well as popular methods to detect the attacks. One of the complexities involved in the ML-based method is that they are mostly of the black-box nature, so their inner working phenomena are very often quite complex to understand and interpret. Moreover, high-dimensional features and an inadequate number of training records have caused some problems in the classifications, such as over fitting of the results, noise sensitiveness, overload computation and lack of significant physical interoperability. In this paper, we propose a discriminative features selection and network intrusion classification by applying sparse modeling with Lasso and SVMs with two kernel functions. SVMs are standard ML techniques which can provide reasonable performance however it can have some shortcomings such as interpretability and huge computational cost. On the other hand, sparse modeling has been considered as an advanced technique for data analysis and processing via regularization. Sparse modeling can be used to simultaneously select discriminative features from the repository of the dataset. Moreover, it also determines the coefficient of the linear classifier where prior information about features structure can be mapped into various sparsity-inducing regularization such as Lasso. Furthermore, we apply sparse modeling for the multiclass-classification purpose; in this way, we can identify and select the features yielded by the network attacks that are the most significant ones. Our experimental in this correspondence suggest that the proposed techniques have better performance than most of the state-of-the-art methods.","PeriodicalId":21635,"journal":{"name":"SINDH UNIVERSITY RESEARCH JOURNAL -SCIENCE SERIES","volume":"183 1","pages":""},"PeriodicalIF":0.0000,"publicationDate":"2019-09-18","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":"1","resultStr":"{\"title\":\"An Efficient Technique for Network Intrusion Detection Using Feature selection\",\"authors\":\"R. A. Shah, A. A. Wagan, M. Ali, K. Hussain, R. Bibi\",\"doi\":\"10.26692/surj/2019.09.77\",\"DOIUrl\":null,\"url\":null,\"abstract\":\"Network Intrusion Detection System (NIDS) is one of the most significant parts of network security that can make secure transactions over a network. Despite many efforts in the field, we can observe increased sophistication and variety of attacks on networks. In such situation Machine learning (ML) based methods have emerged some of the most effective as well as popular methods to detect the attacks. One of the complexities involved in the ML-based method is that they are mostly of the black-box nature, so their inner working phenomena are very often quite complex to understand and interpret. Moreover, high-dimensional features and an inadequate number of training records have caused some problems in the classifications, such as over fitting of the results, noise sensitiveness, overload computation and lack of significant physical interoperability. In this paper, we propose a discriminative features selection and network intrusion classification by applying sparse modeling with Lasso and SVMs with two kernel functions. SVMs are standard ML techniques which can provide reasonable performance however it can have some shortcomings such as interpretability and huge computational cost. On the other hand, sparse modeling has been considered as an advanced technique for data analysis and processing via regularization. Sparse modeling can be used to simultaneously select discriminative features from the repository of the dataset. Moreover, it also determines the coefficient of the linear classifier where prior information about features structure can be mapped into various sparsity-inducing regularization such as Lasso. Furthermore, we apply sparse modeling for the multiclass-classification purpose; in this way, we can identify and select the features yielded by the network attacks that are the most significant ones. Our experimental in this correspondence suggest that the proposed techniques have better performance than most of the state-of-the-art methods.\",\"PeriodicalId\":21635,\"journal\":{\"name\":\"SINDH UNIVERSITY RESEARCH JOURNAL -SCIENCE SERIES\",\"volume\":\"183 1\",\"pages\":\"\"},\"PeriodicalIF\":0.0000,\"publicationDate\":\"2019-09-18\",\"publicationTypes\":\"Journal Article\",\"fieldsOfStudy\":null,\"isOpenAccess\":false,\"openAccessPdf\":\"\",\"citationCount\":\"1\",\"resultStr\":null,\"platform\":\"Semanticscholar\",\"paperid\":null,\"PeriodicalName\":\"SINDH UNIVERSITY RESEARCH JOURNAL -SCIENCE SERIES\",\"FirstCategoryId\":\"1085\",\"ListUrlMain\":\"https://doi.org/10.26692/surj/2019.09.77\",\"RegionNum\":0,\"RegionCategory\":null,\"ArticlePicture\":[],\"TitleCN\":null,\"AbstractTextCN\":null,\"PMCID\":null,\"EPubDate\":\"\",\"PubModel\":\"\",\"JCR\":\"\",\"JCRName\":\"\",\"Score\":null,\"Total\":0}","platform":"Semanticscholar","paperid":null,"PeriodicalName":"SINDH UNIVERSITY RESEARCH JOURNAL -SCIENCE SERIES","FirstCategoryId":"1085","ListUrlMain":"https://doi.org/10.26692/surj/2019.09.77","RegionNum":0,"RegionCategory":null,"ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":null,"EPubDate":"","PubModel":"","JCR":"","JCRName":"","Score":null,"Total":0}
引用次数: 1

摘要

网络入侵检测系统(NIDS)是网络安全的重要组成部分之一,它可以在网络上进行安全的交易。尽管在该领域做出了许多努力,但我们可以观察到网络攻击的复杂性和多样性正在增加。在这种情况下,基于机器学习(ML)的方法已经出现了一些最有效和最流行的检测攻击的方法。基于ml的方法所涉及的复杂性之一是它们大多具有黑箱性质,因此它们的内部工作现象通常非常复杂,难以理解和解释。此外,由于训练记录的高维特征和数量不足,导致分类中存在结果的过度拟合、噪声敏感性、计算过载和缺乏显著的物理互操作性等问题。本文提出了一种基于Lasso和双核支持向量机的稀疏建模的判别特征选择和网络入侵分类方法。支持向量机是标准的机器学习技术,它可以提供合理的性能,但也存在可解释性和巨大的计算成本等缺点。另一方面,稀疏建模被认为是一种通过正则化进行数据分析和处理的先进技术。稀疏建模可以同时从数据集存储库中选择判别特征。此外,它还决定了线性分类器的系数,其中关于特征结构的先验信息可以映射到各种稀疏性诱导正则化(如Lasso)中。此外,我们将稀疏建模应用于多类分类目的;通过这种方式,我们可以识别和选择由网络攻击产生的最显著的特征。我们在此通信中的实验表明,所提出的技术比大多数最先进的方法具有更好的性能。
本文章由计算机程序翻译,如有差异,请以英文原文为准。
查看原文
分享 分享
微信好友 朋友圈 QQ好友 复制链接
本刊更多论文
An Efficient Technique for Network Intrusion Detection Using Feature selection
Network Intrusion Detection System (NIDS) is one of the most significant parts of network security that can make secure transactions over a network. Despite many efforts in the field, we can observe increased sophistication and variety of attacks on networks. In such situation Machine learning (ML) based methods have emerged some of the most effective as well as popular methods to detect the attacks. One of the complexities involved in the ML-based method is that they are mostly of the black-box nature, so their inner working phenomena are very often quite complex to understand and interpret. Moreover, high-dimensional features and an inadequate number of training records have caused some problems in the classifications, such as over fitting of the results, noise sensitiveness, overload computation and lack of significant physical interoperability. In this paper, we propose a discriminative features selection and network intrusion classification by applying sparse modeling with Lasso and SVMs with two kernel functions. SVMs are standard ML techniques which can provide reasonable performance however it can have some shortcomings such as interpretability and huge computational cost. On the other hand, sparse modeling has been considered as an advanced technique for data analysis and processing via regularization. Sparse modeling can be used to simultaneously select discriminative features from the repository of the dataset. Moreover, it also determines the coefficient of the linear classifier where prior information about features structure can be mapped into various sparsity-inducing regularization such as Lasso. Furthermore, we apply sparse modeling for the multiclass-classification purpose; in this way, we can identify and select the features yielded by the network attacks that are the most significant ones. Our experimental in this correspondence suggest that the proposed techniques have better performance than most of the state-of-the-art methods.
求助全文
通过发布文献求助,成功后即可免费获取论文全文。 去求助
来源期刊
自引率
0.00%
发文量
0
期刊最新文献
Structural Analysis of Ranikot Anticline, Southern Kirthar Fold Belt, Pakistan Evaluation of Antimicrobial Susceptibility Patterns of Bacteria in Pus Samples of Last Three Years at Chaghi Laboratory, Quetta, Pakistan Bioaccumulation of two macro-elements (Sodium and Potassium) in relation to body size and condition factor of Notopterus chitala from River Indus, Ghazi Ghat, Pakistan An Estimation of the Land Surface Temperature, Derived from the Landsat Satellite, for the Major Cities in Sindh Province, Pakistan The Screening of Pakistani Wheat Landraces to Stem Rust (Puccinia gramminis f. sp. tritici) resistance under field conditions.
×
引用
GB/T 7714-2015
复制
MLA
复制
APA
复制
导出至
BibTeX EndNote RefMan NoteFirst NoteExpress
×
×
提示
您的信息不完整,为了账户安全,请先补充。
现在去补充
×
提示
您因"违规操作"
具体请查看互助需知
我知道了
×
提示
现在去查看 取消
×
提示
确定
0
微信
客服QQ
Book学术公众号 扫码关注我们
反馈
×
意见反馈
请填写您的意见或建议
请填写您的手机或邮箱
已复制链接
已复制链接
快去分享给好友吧!
我知道了
×
扫码分享
扫码分享
Book学术官方微信
Book学术文献互助
Book学术文献互助群
群 号:481959085
Book学术
文献互助 智能选刊 最新文献 互助须知 联系我们:info@booksci.cn
Book学术提供免费学术资源搜索服务,方便国内外学者检索中英文文献。致力于提供最便捷和优质的服务体验。
Copyright © 2023 Book学术 All rights reserved.
ghs 京公网安备 11010802042870号 京ICP备2023020795号-1