Network intrusion detection using oversampling technique and machine learning algorithms

Abstract

The expeditious growth of the World Wide Web and the rampant flow of network traffic have resulted in a continuous increase of network security threats. Cyber attackers seek to exploit vulnerabilities in network architecture to steal valuable information or disrupt computer resources. Network Intrusion Detection System (NIDS) is used to effectively detect various attacks, thus providing timely protection to network resources from these attacks. To implement NIDS, a stream of supervised and unsupervised machine learning approaches is applied to detect irregularities in network traffic and to address network security issues. Such NIDSs are trained using various datasets that include attack traces. However, due to the advancement in modern-day attacks, these systems are unable to detect the emerging threats. Therefore, NIDS needs to be trained and developed with a modern comprehensive dataset which contains contemporary common and attack activities. This paper presents a framework in which different machine learning classification schemes are employed to detect various types of network attack categories. Five machine learning algorithms: Random Forest, Decision Tree, Logistic Regression, K-Nearest Neighbors and Artificial Neural Networks, are used for attack detection. This study uses a dataset published by the University of New South Wales (UNSW-NB15), a relatively new dataset that contains a large amount of network traffic data with nine categories of network attacks. The results show that the classification models achieved the highest accuracy of 89.29% by applying the Random Forest algorithm. Further improvement in the accuracy of classification models is observed when Synthetic Minority Oversampling Technique (SMOTE) is applied to address the class imbalance problem. After applying the SMOTE, the Random Forest classifier showed an accuracy of 95.1% with 24 selected features from the Principal Component Analysis method.

Machine Learning-Based Ransomware Classification of Bitcoin Transactions

“…In ML and statistics, there are a variety of methods for evaluating the performance of a classifer. Te most common metrics are as follows: Applied Computational Intelligence and Soft Computing (i) Confusion matrix is the most widely used metric (see Table 3) [29,30].…”

Cyber Intrusion Detection Based on a Mutative Scale Chaotic Bat Algorithm with Backpropagation Neural Network

“…erefore, this paper uses a modified Tent chaotic mapping to initialize the population. e expression of this chaotic mapping is shown in (1). Random variables rand × (1/N T ) are added to avoid the Tent mapping from falling into small or unstable periodic points without destroying the properties of chaotic variables, where N T is the quantity of particles in the chaotic sequence; rand is a random variable with values in the range [0, 1].…”

“…e security of computer networks has received an increasing amount of focus as a natural consequence of the ongoing development of both computer technology and networks. However, there are a large number of complex attacks in the network, and these attacks have become the main threats to network and information security [1]. As the second line of defense after the firewall, intrusion detection has proactive and dynamic defense capabilities, effectively making up for the deficiencies of traditional security technologies [2][3][4].…”

Implementasi Adasyn Untuk Imbalance Data Pada Dataset UNSW-NB15 Adasyn Implementation For Data Imbalance on UNSW-NB15 Dataset

“…Hasil menunjukkan Random Forest dengan menggunakan teknik ADASYN lebih unggul dari pada menggunakan teknik SMOTE. Pada beberapa penelitian dengan menggunakan algoritma Random Fores dan dataset yang sama yaitu UNSW-NB15, menggunakan teknik SMOTE [11] mendapatkan akurasi 95,1%, dengan teknik clustering under-sampling [12] mendapatkan akurasi 97,1%, dengan teknik Random Over-sampling [13] mendapatkan akurasi 87,82%, dan menggunakan algoritma Random Fores saja [14] mendapatkan hasil akurasi 98,86%.…”