NEW APPROACH FOR CLASSIFICATION R2L AND U2R ATTACKS IN INTRUSION DETECTION SYSTEM
Authors: Rafeef Fauzi Najim Al-Shammari

ABSTRACT
With the development of web the world has changed into a worldwide advertisement platform with all financial and business practices being conveyed on the web. Being the most basic asset of the creating scene, it is the helpless protest and thus should be secured from the clients with perilous identity set. Since the Internet does not have central observation segment, attackers once in a while, using different progressive hacking topologies find a way to sidestep frameworks security and one such gathering of attacks is Intrusion. An intrusion is a development of breaking into the structure by trading off the security game plans of the structural set up. The strategy of taking a gander at the framework data for the possible intrusion is known to be intrusion detection. Throughout the previous two decades, programmed intrusion discovery framework has been an essential point of thorough investigation. Till now scientists have created Intrusion Detection Systems (IDS) with the ability of recognizing assaults in a few accessible situations; most recent on the scene are Machine Learning approaches. In this paper, the preprocessing unsupervised discretization and feature selection method has been applied to enhance the classification accuracy. Unsupervised discretization method is extremely important to make NSL-KDD data set as appropriate input for experiment. The discretization method needs to map these non numeric values into numeric values of features for helping classifier. After discretized the data, Principal Component Analysis (PCA) method is applied to generate subset features from whole data set. PCA method has been used to reduce dimensionality from dataset. The Naïve Bayes classifier has been employed for classification data as synonymous attacks or normal. For experimental analysis, the NSLKDD standard data has been used to evaluate the proposed model. The empirical analysis results of proposed model demonstrate that it is better in terms of all performance measures. A comparative analysis of the results obtained for the proposed model using preprocessing methods and existing NaiveBayes algorithm with original data is presented. The empirical results prove that the performance of the proposed model is more robust and better than the performance of existing method. Keywords; IDS, NSL-KDD, proposed model, R2L and U2R attacks

    https://ijbpas.com/pdf/2018/April/MS_IJBPAS_2018_44073.pdf
Download PDF