Similarity-based classification using specific features in network intrusion detection

  • Authors:
  • Anazida Zainal;Mohd Aizaini Maarof;Siti Mariyam Shamsuddin

  • Affiliations:
  • Universiti Teknologi Malaysia, Skudai, Johor, Malaysia;Universiti Teknologi Malaysia, Skudai, Johor, Malaysia;Universiti Teknologi Malaysia, Skudai, Johor, Malaysia

  • Venue:
  • AsiaCSN '08 Proceedings of the Fifth IASTED International Conference on Communication Systems and Networks
  • Year:
  • 2008

Quantified Score

Hi-index 0.00

Visualization

Abstract

One of a major challenge in IDS is to discover the intrusive patterns which are normally hidden in abundant of data. Furthermore, it has many features. Some of the features are redundant and some are less significant and they contribute little to the detection process. The purpose of this study is to identify an optimum number of significant features that can represent each category; Normal, Probe, U2R, R2L and DoS. Here, we deployed hierarchical feature selection approach and used similarity-based classification (Kohonen Self-Organizing Map) to classify an input data into their respective categories. Performance was measured based on their correct classification. Empirical results suggest that there is no generic feature subset which is suitable to represent all categories. Instead, different categories are best represented using different feature subsets.