Detection of Anomalies in the Computer Network Behaviour release_siowm252r5a27kfz7psltjwn3y

by Danijela Protić, Miomir Stanković

Abstract

The goal of anomaly-based intrusion detection is to build a system which monitors computer network behaviour and generates alerts if either a known attack or an anomaly is detected. Anomaly-based intrusion detection system detects intrusions based on a reference model which identifies normal behaviour of the computer network and flags an anomaly. Basic challenges in anomaly-based detection are difficulties to identify a 'normal' network behaviour and complexity of the dataset needed to train the intrusion detection system. Supervised machine learning can be used to train the binary classifiers in order to recognize the notion of normality. In this paper we present an algorithm for feature selection and instances normalization which reduces the Kyoto 2006+ dataset in order to increase accuracy and decrease time for training, testing and validating intrusion detection systems based on five models: k-Nearest Neighbour (k-NN), weighted k-NN (wk-NN), Support Vector Machine (SVM), Decision Tree, and Feedforward Neural Network (FNN).
In application/xml+jats format

Archived Files and Locations

application/pdf  408.9 kB
file_wn7rxj2rzrfkfldsvme7nminwm
journals.euser.org (web)
web.archive.org (webarchive)
Read Archived PDF
Preserved and Accessible
Type  article-journal
Stage   published
Date   2020-02-21
Journal Metadata
Not in DOAJ
In Keepers Registry
ISSN-L:  2601-6303
Work Entity
access all versions, variants, and formats of this works (eg, pre-prints)
Catalog Record
Revision: 067b0aae-2d92-45f4-9ffe-0e54b50600e7
API URL: JSON