Efficient training data extraction framework for intrusion detection systemsReportar como inadecuado

Efficient training data extraction framework for intrusion detection systems - Descarga este documento en PDF. Documentación en PDF para descargar gratis. Disponible también para leer online.

1 LTCI - Laboratoire Traitement et Communication de l-Information

Abstract : One of the most important challenges in networks of future is how to provide security services in an efficient and quick manner without questioning the conceptual model of these networks. NIDS Network Intrusion Detection system is an effective approach for dealing with these security issues. Their detection engines use two main approaches to inspect malicious traffic; misuse detection and anomaly detection. Machine learning approaches have been widely investigated in anomaly detection systems. However, despite multiple academic researches, such systems are rarely employed in operational settings. They suffer from long time training, lack of good quality training data and a random selection of features training attributes. This paper aims to resolve issues of limited quantity and quality of training data sets and investigates the impact of features selection process on the classification performance. It introduces a novel framework to extract efficient real - ground-truth - training data sets from the network traffic for supervised machine learning algorithms. We support this claim by performing the evaluation of results on a Naive Bayesian classifier.

Keywords : Attack Detection machine learning Security rules Pattern-Matching

Autor: Abdelhamid Makiou - Ahmed Serhrouchni -

Fuente: https://hal.archives-ouvertes.fr/


Documentos relacionados