Detection of Zero-Day Attacks in Network IDS through High Performance Soft Computing

Mishra, Srinivas; Pradhan, Sateesh Kumar; Rath, Subhendu Kumar

doi:10.1109/icais50930.2021.9395929

Cited by 1 publication

(1 citation statement)

References 14 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…For organizing and to deal with uncertain and imprecise facts of real world, in1965 Zadeh invented a technique called Fuzzy Logic, which today is one of the most proficient and widely used soft computing techniques [19,20]. It is also a useful tool for decision making and for managing inaccurate and noisy data.…”

Section: Literature Reviewmentioning

confidence: 99%

Performance Evaluation of Network Intrusion Detection System for Detecting Zero-Day Attacks: SNORT-XSS Algorithm

Mishra

Pradhan²,

Rath³

2022

Self Cite

View full text Add to dashboard Cite

The main objective of Intrusion Detection and Prevention Systems is to provide a method of detecting and preventing malicious behaviors in a network system to minimize the harm caused by attackers. In this article, a survey of the techniques applied for the identification and classification of attacks based on KDD Cup’99 and DARPA data set is discussed, and from the open issues a new and a proficient method called SNORT-XSS algorithm is anticipated and implemented that can recognize and classify real time intrusions including zero day attacks. For this research, the SNORT open source tool developed by CISCO Systems was used to describe rules from the existing data collected from DARPA and KDD Cup’99 dataset. Fuzzy Reasoning system is applied to organize the rules into fuzzy sets that reduces true negative and false positive rate. The advantage of Feed Forward Neural Network with Back Propagation of Errors from Artificial Neuron Networks is considered for training, validating and testing the proposed system. The experimental results achieved by preprocessing anomalous behaviors in a network and the detection rate of zero-day attacks or novel attacks were very promising and were beyond expectations. The precision values of the proposed model were 98.93% and 98.89% respectively, and detection rate of Probe and DoS attacks were greater than 98%. The false positive and true negative rate is almost negligible. It was noticed that the best categorization was acquired at epoch numbers from 50 to 55 with a mean squared error of 0.004.

show abstract

Section: Literature Reviewmentioning

confidence: 99%