Citation

Khor, Kok Chin and Ting, Choo Yee and Somnuk, Phon Amnuaisuk (2012) A cascaded classifier approach for improving detection rates on rare attack categories in network intrusion detection. Applied Intelligence, 36 (2). pp. 320-329. ISSN 0924-669X

Text A cascaded classifier approach for improving detection rates on rare attack categories in network intrusion detection.pdf Restricted to Repository staff only Download (476kB)

Abstract

Network intrusion detection research work that employed KDDCup 99 dataset often encounter challenges in creating classifiers that could handle unequal distributed attack categories. The accuracy of a classification model could be jeopardized if the distribution of attack categories in a training dataset is heavily imbalanced where the rare categories are less than 2% of the total population. In such cases, the model could not efficiently learn the characteristics of rare categories and this will result in poor detection rates. In this research, we introduce an efficient and effective approach in dealing with the unequal distribution of attack categories. Our approach relies on the training of cascaded classifiers using a dichotomized training dataset in each cascading stage. The training dataset is dichotomized based on the rare and non-rare attack categories. The empirical findings support our arguments that training cascaded classifiers using the dichotomized dataset provides higher detection rates on the rare categories as well as comparably higher detection rates for the non-rare attack categories as compared to the findings reported in other research works. The higher detection rates are due to the mitigation of the influence from the dominant categories if the rare attack categories are separated from the dataset.

Item Type:	Article
Subjects:	Q Science > QA Mathematics > QA71-90 Instruments and machines > QA75.5-76.95 Electronic computers. Computer science
Divisions:	Faculty of Computing and Informatics (FCI)
Depositing User:	Ms Rosnani Abd Wahab
Date Deposited:	04 Apr 2012 07:40
Last Modified:	17 Dec 2014 03:36
URII:	http://shdl.mmu.edu.my/id/eprint/3463

Downloads

Edit (login required)