802.11 network intrusion detection using genetic programming

  • Authors:
  • Patrick LaRoche;A. Nur Zincir-Heywood

  • Affiliations:
  • Dalhousie University, Halifax, Nova Scotia, Canada;Dalhousie University, Halifax, Nova Scotia, Canada

  • Venue:
  • GECCO '05 Proceedings of the 7th annual workshop on Genetic and evolutionary computation
  • Year:
  • 2005

Quantified Score

Hi-index 0.00

Visualization

Abstract

Genetic Programming (GP) based Intrusion Detection Systems (IDS) use connection state network data during their training phase. These connection states are recorded as a set of features that the GP uses to train and test solutions which allow for the efficient and accurate detection of given attack patterns. However, when applied to a 802.11 network that is faced with attacks specific to the 802.11 protocol, the GP's detection rate reduces dramatically. In this work we discuss what causes this effect, and what can be done to improve the GP's performance on 802.11 networks.