2020
DOI: 10.1002/cpe.5690
|View full text |Cite
|
Sign up to set email alerts
|

A novel intrusion detection method based on threshold modification using receiver operating characteristic curve

Abstract: SummaryClass imbalance makes traditional intrusion detection system have low detection rate (DR) and high false positive rate (FR) for minority class, which is unsuitable for practical needs. In order to improve the DRs and reduce FRs of minority classes, we propose a novel intrusion detection method, which combines convolutional neural networks (CNNs) algorithm with threshold modification method based on receiver operating characteristic (ROC) curve. In this method, we use CNNs as a classifier and modify thre… Show more

Help me understand this report

Search citation statements

Order By: Relevance

Paper Sections

Select...
2
1
1
1

Citation Types

0
5
0

Year Published

2020
2020
2024
2024

Publication Types

Select...
5
3
1

Relationship

1
8

Authors

Journals

citations
Cited by 12 publications
(5 citation statements)
references
References 27 publications
0
5
0
Order By: Relevance
“…For this purpose, AUC and F-score indexes will be used, which are good choices for problems dealing with imbalanced data (Sokolova, Japkowicz & Szpakowicz, 2006). AUC indicates the area below the diagram in the ROC curve, and the ROC curve is a method for judging the performance of a two-class classifier (Luo et al, 2020). In the ROC curve, the vertical axis is the TPR (represents the true positive rate), Also, the horizontal axis is FPR (represents the false positive rate).…”
Section: Discussionmentioning
confidence: 99%
“…For this purpose, AUC and F-score indexes will be used, which are good choices for problems dealing with imbalanced data (Sokolova, Japkowicz & Szpakowicz, 2006). AUC indicates the area below the diagram in the ROC curve, and the ROC curve is a method for judging the performance of a two-class classifier (Luo et al, 2020). In the ROC curve, the vertical axis is the TPR (represents the true positive rate), Also, the horizontal axis is FPR (represents the false positive rate).…”
Section: Discussionmentioning
confidence: 99%
“…For this purpose, AUC and F-score indexes will be used, which are good choices for problems dealing with imbalanced data (Sokolova, Japkowicz, and Szpakowicz 2006). AUC indicates the area below the diagram in the ROC curve, and the ROC curve is a method for judging the performance of a two-class classifier (Luo et al 2020). In the ROC curve, the vertical axis is the TPR (represents the true positive rate), Also, the horizontal axis is FPR (represents the false positive rate).…”
Section: Discussionmentioning
confidence: 99%
“…The data distribution after sampling is shown in the Table 7 below. Figure 14 shows the detection rate of the proposed intrusion detection model on Normal and 9 types of attack data, compared with CMLW [47], TSDL [48] and Thresholdoptimized CNNs [49]. Among them, PSO-LightGBM has an excellent detection rate for most of the data's type, especially in the detection of Backdoor, Shellcode and Worms, the three low frequency attacks, reached 51.28%, 64.47% and 77.78%, respectively, which is much higher than the other three IDSs listed, showing the excellent anomaly detection ability of this model.…”
Section: Experimental Evaluation a Evaluation Metricsmentioning
confidence: 99%