Selecting Features for Anomaly Intrusion Detection: A Novel Method using Fuzzy C Means and Decision Tree Classification

作者: Jingping Song , Zhiliang Zhu , Peter Scully , Chris Price

DOI: 10.1007/978-3-319-03584-0_22

关键词: Normalization (statistics)MathematicsData miningDecision treeIntrusion detection systemDecision tree learningCluster analysisArtificial intelligenceFuzzy logicFeature selectionPattern recognitionClassifier (UML)

摘要: In this work, a new method for classification is proposed consisting of combination feature selection, normalization, fuzzy C means clustering algorithm and C4.5 decision tree algorithm. The aim to improve the performance classifier by using selected features. used partition training instances into clusters. On each cluster, we build Experiments on KDD CUP 99 data set shows that our in detecting intrusion achieves better while reducing relevant features more than 80%.

参考文章(18)
A. Nur Zincir-Heywood, Hilmi Günes Kayacik, Malcolm I. Heywood, Selecting Features for Intrusion Detection: A Feature Relevance Analysis on KDD 99. conference on privacy, security and trust. ,(2005)
Christopher Leckie, Kingsly Leung, Unsupervised anomaly detection in network intrusion detection using clusters ACSC '05 Proceedings of the Twenty-eighth Australasian conference on Computer Science - Volume 38. ,vol. 38, pp. 333- 342 ,(2005)
Hans-Peter Kriegel, Martin Ester, Jörg Sander, Xiaowei Xu, A density-based algorithm for discovering clusters in large spatial Databases with Noise knowledge discovery and data mining. pp. 226- 231 ,(1996)
Pedro Casas, Johan Mazel, Philippe Owezarski, Unsupervised Network Intrusion Detection Systems: Detecting the Unknown without Knowledge Computer Communications. ,vol. 35, pp. 772- 783 ,(2012) , 10.1016/J.COMCOM.2012.01.016
Amuthan Prabakar Muniyandi, R. Rajeswari, R. Rajaram, Network Anomaly Detection by Cascading K-Means Clustering and C4.5 Decision Tree algorithm Procedia Engineering. ,vol. 30, pp. 174- 182 ,(2012) , 10.1016/J.PROENG.2012.01.849
Lance Parsons, Ehtesham Haque, Huan Liu, Subspace clustering for high dimensional data ACM SIGKDD Explorations Newsletter. ,vol. 6, pp. 90- 105 ,(2004) , 10.1145/1007730.1007731
Jaeik Cho, Changhoon Lee, Sanghyun Cho, Jung Hwan Song, Jongin Lim, Jongsub Moon, A statistical model for network data analysis: KDD CUP 99' data evaluation and its comparing with MIT Lincoln Laboratory network data Simulation Modelling Practice and Theory. ,vol. 18, pp. 431- 435 ,(2010) , 10.1016/J.SIMPAT.2009.09.003
Shih-Wei Lin, Kuo-Ching Ying, Chou-Yuan Lee, Zne-Jung Lee, None, An intelligent algorithm with feature selection and decision rules applied to anomaly intrusion detection soft computing. ,vol. 12, pp. 3285- 3290 ,(2012) , 10.1016/J.ASOC.2012.05.004
Fatemeh Amiri, MohammadMahdi Rezaei Yousefi, Caro Lucas, Azadeh Shakery, Nasser Yazdani, Mutual information-based feature selection for intrusion detection systems Journal of Network and Computer Applications. ,vol. 34, pp. 1184- 1199 ,(2011) , 10.1016/J.JNCA.2011.01.002