Three-Way Selection Random Forest Optimization Model for Anomaly Traffic Detection

Abstract

With the application and development of Internet technology, network traffic is growing rapidly, and the situation of network security is becoming more and more serious. As an important way to protect network security, abnormal traffic detection has been paid more and more attention. In this paper, the uncertainty of the samples in the abnormal traffic detection dataset is studied. Combining the three-way decision idea with the random forest algorithm, a three-way selection random forest optimization model for abnormal traffic detection is proposed. Firstly, the three-way decision idea is integrated into the random selection process of feature attributes, and the attribute importance based on decision boundary entropy is calculated. The feature attributes are divided into the normal domain, abnormal domain, and uncertain domain, and the three-way attribute random selection rules are designed to randomly select the feature attributes that conform to the rules from different domains. Secondly, the classifier evaluation function is constructed by combining pure accuracy and diversity, and the anomaly traffic detection base classifier with a high evaluation value is selected for integration to eliminate the unstable factors caused by randomness in the process of base classifier generation. Thirdly, the optimal node weight combination of the base classifier is obtained by iterative calculation of the gray wolf optimization algorithm to further improve the prediction effect and robustness of the model. Finally, the model is applied to the abnormal traffic detection dataset. The experimental results show that the prediction accuracy of the three-way selection random forest optimization model on CIC-IDS2017, KDDCUP99, and NSLKDD datasets is 96.1%, 95.2%, and 95.3%, respectively, which has a better detection effect than other machine learning algorithms.

A New Multi-Target Three-Way Threat Assessment Method with Heterogeneous Information and Attribute Relevance

“…It succeeds in rationally assigning semantic interpretations to the positive, negative, and boundary domains of rough sets, which correspond to acceptance, rejection, and delay decisions, respectively, in practical decision making. Since the proposal of the three-way decisions, many scholars have refined and extended it, and it has been widely used in many fields [19][20][21][22][23][24][25].…”

Resolving Agent Conflicts Using Enhanced Uncertainty Modeling Tools for Intelligent Decision Making

“…Zhi et al [14] introduced a three-way concept for conflict analysis [15]. Three-way concept analysis was proposed in [15] by combining three-way decision theory [16][17][18][19][20] and formal concept analysis [21,22], with the ability of describing the properties that objects possess in common and those that they do not possess in common [23,24]. Zhi et al [14] analyzed the conflict relationships between agents and identified the binary relationships between sets of agents and sets of issues by using three-way concepts, and then analyzed the causes of conflict.…”