Unsupervised Genetic Algorithm Deployed for Intrusion Detection

  • Authors:
  • Zorana Banković;Slobodan Bojanić;Octavio Nieto;Atta Badii

  • Affiliations:
  • ETSI Telecomunicación, Universidad Politécnica de Madrid, Madrid, Spain 28040;ETSI Telecomunicación, Universidad Politécnica de Madrid, Madrid, Spain 28040;ETSI Telecomunicación, Universidad Politécnica de Madrid, Madrid, Spain 28040;Intelligent Media Systems & Services Research Centre School of Systems Engineering, University of Reading, Reading, United Kingdom RG6 6AY

  • Venue:
  • HAIS '08 Proceedings of the 3rd international workshop on Hybrid Artificial Intelligence Systems
  • Year:
  • 2008

Quantified Score

Hi-index 0.00

Visualization

Abstract

This paper represents the first step in an on-going work for designing an unsupervised method based on genetic algorithm for intrusion detection. Its main role in a broader system is to notify of an unusual traffic and in that way provide the possibility of detecting unknown attacks. Most of the machine-learning techniques deployed for intrusion detection are supervised as these techniques are generally more accurate, but this implies the need of labeling the data for training and testing which is time-consuming and error-prone. Hence, our goal is to devise an anomaly detector which would be unsupervised, but at the same time robust and accurate. Genetic algorithms are robust and able to avoid getting stuck in local optima, unlike the rest of clustering techniques. The model is verified on KDD99 benchmark dataset, generating a solution competitive with the solutions of the state-of-the-art which demonstrates high possibilities of the proposed method.