Evaluation of black-marker and bilateral classification with J48 decision tree in anomaly based intrusion detection system
DC Field | Value | Language |
---|---|---|
dc.contributor.author | Chew, Yee Jian | - |
dc.contributor.author | Ooi, Shih Yin | - |
dc.contributor.author | Wong, Kok-Seng | - |
dc.contributor.author | Pang, Ying Han | - |
dc.contributor.author | Hwang, Seong Oun | - |
dc.date.available | 2020-07-10T04:40:32Z | - |
dc.date.created | 2020-07-06 | - |
dc.date.issued | 2018 | - |
dc.identifier.issn | 1064-1246 | - |
dc.identifier.uri | https://scholarworks.bwise.kr/hongik/handle/2020.sw.hongik/4751 | - |
dc.description.abstract | Anomaly-based intrusion detection system (IDS) is gaining wide attention from the research community, due to its robustness in detecting and profiling the newly discovered network attacks. Unlike signature-based IDS which solely relying on a set of pre-defined rules through some massive human efforts, anomaly-based IDS utilises the collected network traces in building its own classification model. The classification model can optimised when a large set of network traces is available. The ideal way of pooling the network traces is through database sharing. However, not many organisations are willing to release or share their network databases due to some privacy concerns, i.e. to avoid some kinds of internet traffic behaviour profiling. To address this issue, a number of anonymisation techniques was developed. The main usage of anonymisation techniques is to conceal the potentially sensitive information in the network traces. However, it is also important to ensure the anonymisation techniques are not over abusing the performances of IDS. To do so, the convention way is by using a Snort IDS to measure the number of alarms generated before-and-after an anonymisation solution is applied. However, this approach is infeasible for Anomaly-Based IDS. Thus, an alternative way of using machine learning approach is proposed and explored in this manuscript. Instead of manual evaluation through the usage of Snort IDS, a J48 decision tree (Weka package of C4.5 algorithm) is used. In this manuscript, two anonymisation techniques, (1) black-marker, and (2) bilateral classification are used to hide the value of port numbers; and their before-and-after performances are evaluated through a J48 decision tree. | - |
dc.language | 영어 | - |
dc.language.iso | en | - |
dc.publisher | IOS PRESS | - |
dc.title | Evaluation of black-marker and bilateral classification with J48 decision tree in anomaly based intrusion detection system | - |
dc.type | Article | - |
dc.contributor.affiliatedAuthor | Hwang, Seong Oun | - |
dc.identifier.doi | 10.3233/JIFS-169834 | - |
dc.identifier.scopusid | 2-s2.0-85059485433 | - |
dc.identifier.wosid | 000459214900013 | - |
dc.identifier.bibliographicCitation | JOURNAL OF INTELLIGENT & FUZZY SYSTEMS, v.35, no.6, pp.5927 - 5937 | - |
dc.relation.isPartOf | JOURNAL OF INTELLIGENT & FUZZY SYSTEMS | - |
dc.citation.title | JOURNAL OF INTELLIGENT & FUZZY SYSTEMS | - |
dc.citation.volume | 35 | - |
dc.citation.number | 6 | - |
dc.citation.startPage | 5927 | - |
dc.citation.endPage | 5937 | - |
dc.type.rims | ART | - |
dc.type.docType | Article; Proceedings Paper | - |
dc.description.journalClass | 1 | - |
dc.description.journalRegisteredClass | scie | - |
dc.description.journalRegisteredClass | scopus | - |
dc.relation.journalResearchArea | Computer Science | - |
dc.relation.journalWebOfScienceCategory | Computer Science, Artificial Intelligence | - |
dc.subject.keywordAuthor | Network packet traces | - |
dc.subject.keywordAuthor | intrusion detection system (IDS) | - |
dc.subject.keywordAuthor | J48 decision tree | - |
dc.subject.keywordAuthor | anonymisation | - |
dc.subject.keywordAuthor | black-marker | - |
dc.subject.keywordAuthor | bilateral classification | - |
Items in ScholarWorks are protected by copyright, with all rights reserved, unless otherwise indicated.
94, Wausan-ro, Mapo-gu, Seoul, 04066, Korea02-320-1314
COPYRIGHT 2020 HONGIK UNIVERSITY. ALL RIGHTS RESERVED.
Certain data included herein are derived from the © Web of Science of Clarivate Analytics. All rights reserved.
You may not copy or re-distribute this material in whole or in part without the prior written consent of Clarivate Analytics.