Abstract
Intrusion detection can be considered as a classification task that attempts to classify a request to access network services as safe or malicious. Data mining techniques are being used to extract valuable information that can help in detecting intrusions. In this paper, we evaluate the performance of rule based classifiers like: JRip, RIDOR, NNge and Decision Table (DT) with Naïve Bayes (NB) along with their ensemble approach. We also propose to use the Semi-Naïve Bayesian approach (DTNB) that combines Naïve Bayes with the induction of Decision Tables in order to enhance the performance of an intrusion detection system. Experimental results show that the proposed approach is faster, reliable, and accurate with low false positive rates, which are the essential features of an efficient network intrusion detection system.
Preview
Unable to display preview. Download preview PDF.
Similar content being viewed by others
References
MIT Lincoln Laboratory, http://www.ll.mit.edu/IST/ideval/
Annur, N.B., Sallehudin, H., Gani, A., Zakari, O.: Identifying false alarm for network intrusion detection system using hybrid data mining and decision tree. Malaysian journal of computer science 21(2), 101–115 (2008)
Peddabachigari, S., Abraham, A., Grosan, C., Thomas, J.: Modelling IDS using hybrid intelligent systems. Journal of network and computer applications 30(1), 114–132 (2007)
Mukkamala, S., Sung, A.H., Abraham, A.: Intrusion detection using an ensemble of intelligent paradigms. Journal of network and computer applications 28(2005), 167–182 (2005)
Pan, Z.-S., Chen, S.-C., Hu, G.-B., Zhang, D.-Q.: Hybrid neural network and C4.5 for Misuse detection. In: Proc. of International conference on Machine Learning and Cybernatics, Xi’an, November 2-5, pp. 2463–2467. IEEE Press, USA (2003)
Kotsiantis, S.B.: Supervised machine learning: A review of classification Techniques. Informatica 31, 249–268 (2007)
Stein, G., Chen, B., Wu, A.S., Hua, K.A.: Decision Tree classifier for network intusion detection with GA-based feature selection. In: Proc. of the 43rd Annual South East Regional Conference, kennesa, Georgia, vol. 12, pp. 136–141 (2005)
Katar, C.: Combining multiple techniques for intrusion detection. Intl. Journal of Comp.Sc and Net.Security (IJCSNS) 6(2B), 208–218 (2006)
Salzberg, S.: A nearest hyperrectangle learning method. Machine learning 6, 277–309 (1991)
Roy, S.: Nearest Neighbour with generalization, Christchurch, NZ (2002)
Cohen, W.W.: Fast effective rule induction. In: 12th Intl.Conf. On Machine learning, pp. 115–123 (1995)
Gaines, B.R., Cronpton, P.: Induction of Ripple-Down rules applied to modelling large databases. Journal of Intelligent information system 5(3), 221–228 (1995)
Panda, M., Patra, M.R.: Ensembling rule based classifiers for detecting network intrusions. In: International conference on advances in recent techniques communication techniques (ARTCOM 2009), Kerla, India. IEEE Computer Society Press, USA (2009)
Russel, S.J., Norvig, P.: Artificial Intelligence: A modern approach. International Edition. Pearson US Imports and PHIPES, London (2002)
Domingos, P., Pizzani, M.J.: On the optimality of the simple Bayesian classifier under zero-one loss. Mach.learning 29(2-3), 103–130 (1997)
Hall, M., Frank, E.: Combining Naïve Bayes and Decision Tables. In: Wilson, D.L., Chad, H. (eds.) Proc. of the 21st Intl. Florida Artificial Intelligence society conference (FLAIRS), pp. 318–319. AAAI Press, Menlo Park (2008)
Author information
Authors and Affiliations
Editor information
Editors and Affiliations
Rights and permissions
Copyright information
© 2009 Springer-Verlag Berlin Heidelberg
About this paper
Cite this paper
Panda, M., Patra, M.R. (2009). Semi-Naïve Bayesian Method for Network Intrusion Detection System. In: Leung, C.S., Lee, M., Chan, J.H. (eds) Neural Information Processing. ICONIP 2009. Lecture Notes in Computer Science, vol 5863. Springer, Berlin, Heidelberg. https://doi.org/10.1007/978-3-642-10677-4_70
Download citation
DOI: https://doi.org/10.1007/978-3-642-10677-4_70
Publisher Name: Springer, Berlin, Heidelberg
Print ISBN: 978-3-642-10676-7
Online ISBN: 978-3-642-10677-4
eBook Packages: Computer ScienceComputer Science (R0)