Intelligent hybrid approach for classification accuracy of intrusion detection system

مقدم أطروحة جامعية

Abbas, Mustafa Nihad

مشرف أطروحة جامعية

al-Fayyumi, Muhammad Ahmad

الجامعة

جامعة الإسراء

الكلية

كلية تكنولوجيا المعلومات

القسم الأكاديمي

قسم هندسة البرمجيات

دولة الجامعة

الأردن

الدرجة العلمية

ماجستير

تاريخ الدرجة العلمية

2020

الملخص الإنجليزي

Intrusion detection system (I.D.S) is an essential component, which enhances the security of computer systems by actively detecting all forms of attack at the early stages.

The main use of IDS is the monitoring of the network traffics and analyzing the behavior of the users in searching for any abnormal activity or attack signature for real-time intrusion detection.

The main weakness in any IDS is their inability to offer adequate sensitivity and accuracy; coupled with their inability to process enormous data.

To address these issues (such as the increasing traffic, huge behavior profiles, large signature databases, and the inability of differentiating normal behaviors from the suspicious ones), several algorithms have been developed.

Hence, the main aim of this work is to choose the differentiating features for the development of an optimal machine learning algorithm which can offer high detection rates, fast training, and testing processes offline.

The proposed machine learning model contains a feature selection algorithm (wrapper type) which is based on the integration of the Binary Firefly algorithm enhanced for feature selection by crossover operator taking from the genetic algorithm, called (GA-FA) with the Naïve Bayesian Classifier (NBC).

The performance of the proposed model was tested on NSL_KDD data sets prepared by the MIT Lincoln Laboratory.

The model testing was based on several experiments and different scenarios (the effect of swarm size, number of iterations, and the ????).

For evaluating the ability to select the minimum number of features with the higher value of classification accuracy, the algorithm worked perfectly and selected a comparable number of features.

The model achieved the best average accuracy of 97.011%.

In conclusion, the proposed feature selection algorithm has the ability to select the most relevant features which enhance the classification accuracy of the network intrusion detection system.

التخصصات الرئيسية

تكنولوجيا المعلومات وعلم الحاسوب

الموضوعات

• أمن الحاسوب
• أنظمة كشف التسلل(أمن الحاسوب)
• الحواسيب الهجينة

عدد الصفحات

57

قائمة المحتويات

• APA
• MLA
• AMA

لغة النص

الإنجليزية

نوع البيانات

رسائل جامعية

رقم السجل

BIM-988718