Privacy-Preserving Decision Tree Pruning In Network-Based Intrusion Detection System

Citation

Chew, Yee Jian (2019) Privacy-Preserving Decision Tree Pruning In Network-Based Intrusion Detection System. Masters thesis, Multimedia University.

Full text not available from this repository.

Abstract

Machine learning techniques have been extensively adopted in the domain of Network-based Intrusion Detection System (NIDS) especially in the task of network traffics classification. While having a precise classification model in separating the normal and malicious network traffics still remain as the ultimate goal, the privacy protection for network traffic database cannot be ignore as well. The common solution to tackle this matter is anonymising the database through the statistical approach. Anonymising can be referred to masking, hiding or removing certain sensitive information from the database. In the past decades, numerous anonymisation tools and techniques have been developed to conceal the sensitive information which could be revealed by the network data. The main usage of privacy solutions is to conceal the potentially sensitive information in the network traces. However, it is also important to ensure the anonymisation techniques are not severely deteriorating the performances of NIDS. Presently, the conventional way to gauge the usability of network data is by exploiting the number of alarms generated by Snort NIDS before-and-after an anonymisation solution. Nevertheless, this approach may not be feasible when considering the application of machine learning in segregating the traffics. In order to fill this gap, 10 notable machine classifiers are employed to evaluate the performances of 2 network data privacy solutions: (1) port number bilateral classification and (2) IP truncation. Utility of the network data is measured based on the classification accuracy attained.

Item Type: Thesis (Masters)
Additional Information: Call No.: TK5105.59 .C44 2019
Uncontrolled Keywords: Intrusion detection systems (Computer security)
Subjects: T Technology > TK Electrical engineering. Electronics Nuclear engineering > TK5101-6720 Telecommunication. Including telegraphy, telephone, radio, radar, television
Divisions: Faculty of Information Science and Technology (FIST)
Depositing User: Ms Nurul Iqtiani Ahmad
Date Deposited: 21 Sep 2020 20:52
Last Modified: 21 Sep 2020 20:52
URII: http://shdl.mmu.edu.my/id/eprint/7752

Downloads

Downloads per month over past year

View ItemEdit (login required)