Enhancing supervised detection using decision tree and decision table

Abstract EN

In this paper, the proposal for Enhancing supervised detection by generating a modified training set of segment steps of the decision table algorithms, then apply a decision tree to generate the rule-based classifier.

Supervised detection is used in the system log analysis to define normal or abnormal behavior and then save all abnormal events in the security log for analysis of decision tree ID3 to reduce the number of false positive.