The importance of intrusion detection is a foremost issue in the field of cyber security. Vulnerabilities in network security have surged due to increased network traffic and the internet’s rapid growth. Cybercriminals exploit flaws in network design to disrupt computer systems or steal sensitive information. Timely intrusion detection and protection of network resources from them are the main purposes of the Intrusion Detection System (IDS). The implementation of IDS uses various machine learning methods to identify inconsistencies in network traffic and address network security concerns. A variety of datasets, including attack patterns, train these IDSs. The IDS model struggles to identify some minor attacks due to missing patterns in the training set, resulting in a reduced detection rate for rare attacks. IDS faces a primary challenge in enhancing the detection rate of minor attacks in the dataset, a problem that the literature has not yet addressed. We utilize different machine learning algorithms to detect attacks, achieving an accuracy of above 99%, but they fail to detect rare attacks. We implemented the Synthetic Minority Oversampling Technique (SMOTE) to address imbalanced classes and enhance the accuracy of classification models. The Random Forest classifier, along with the SMOTE, achieved 99.48% accuracy when 28 features were considered using the low variance filter method.

错误:搜索内容不能为空,请输入英文关键词
错误:关键词超出字数限制,请精简
高级检索

Improvement in Rare Attack Intrusion Detection Rate Using Machine Learning Algorithms

  • Abdul Majid Soomro,
  • Ahmad Waleed,
  • Susama Bagchi,
  • Sanjoy Kumar Debnath,
  • Shruti Arora,
  • Swati Malik,
  • Gaganpreet Kaur

摘要

The importance of intrusion detection is a foremost issue in the field of cyber security. Vulnerabilities in network security have surged due to increased network traffic and the internet’s rapid growth. Cybercriminals exploit flaws in network design to disrupt computer systems or steal sensitive information. Timely intrusion detection and protection of network resources from them are the main purposes of the Intrusion Detection System (IDS). The implementation of IDS uses various machine learning methods to identify inconsistencies in network traffic and address network security concerns. A variety of datasets, including attack patterns, train these IDSs. The IDS model struggles to identify some minor attacks due to missing patterns in the training set, resulting in a reduced detection rate for rare attacks. IDS faces a primary challenge in enhancing the detection rate of minor attacks in the dataset, a problem that the literature has not yet addressed. We utilize different machine learning algorithms to detect attacks, achieving an accuracy of above 99%, but they fail to detect rare attacks. We implemented the Synthetic Minority Oversampling Technique (SMOTE) to address imbalanced classes and enhance the accuracy of classification models. The Random Forest classifier, along with the SMOTE, achieved 99.48% accuracy when 28 features were considered using the low variance filter method.