Enhanced Network Security: A Data Mining Approach to Intrusion Detection

Teoh Chun Hwung; Yuhanis Yusof

doi:10.32890/jdsd2024.2.1.9

Authors

Teoh Chun Hwung Universiti Utara Malaysia, Malaysia
Yuhanis Yusof Universiti Utara Malaysia, Malaysia

DOI:

https://doi.org/10.32890/jdsd2024.2.1.9

Keywords:

intrusion detection, cybersecurity, cyberattack, data mining

Abstract

In the ever-evolving landscape of network security, the role of Intrusion Detection Systems (IDSs) is critical. These systems serve as the guardians of digital networks, defending against a relentless tide of cyber threats. However, the efficacy of IDSs in accurately detecting and preventing these threats remains a critical concern. The emergence of new attack vectors and the growing sophistication of cyberattacks underscore the need for innovative approaches to intrusion detection. Nonetheless, there is an information vacuum about the efficacy of different data mining approaches in intrusion detection. This study investigates the deployment of seven data mining models, which include Decision Tree, Random Forest, Support Vector Machine (SVM), Logistic Regression, Naïve Bayes, and two types of Recurrent Neural Networks (RNN) on five (5) IDS benchmark datasets. Based on the undertaken experiments, it is evident that the RNN is the best classifier as it obtained 100% accuracy for all datasets. Due to its strength in modelling time-dependent and sequential data problems, RNN has become powerful in predicting future attacks. As our digital world evolves, so must our cyber defences; hence, this study strives to equip network security professionals with the knowledge and tools needed to fortify their networks, ensuring resilience against the ever-adaptive landscape of cyber threats.

Author Biography

Yuhanis Yusof, Universiti Utara Malaysia

UUM College of Arts and Sciences

References

Ahsan, R., Shi, W., & Corriveau, J. P. (2022). Network intrusion detection using machine learning approaches: Addressing data imbalance. IET Cyber-Physical Systems: Theory and Applications, 7(1). https://doi.org/10.1049/cps2.12013

Chou, D., & Jiang, M. (2022). A Survey on Data-driven Network Intrusion Detection. ACM Computing Surveys, 54(9). https://doi.org/10.1145/3472753

Cihan, Ş., Aydos, M., & Şimşek, N. Y. (2021). A Tree-Based Machine Learning and Deep Learning Classification for Network Intrusion Detection. European Journal of Science and Technology. https://doi.org/10.31590/ejosat.889994

Duraz, R., Espes, D., Francq, J., & Vaton, S. (2023). Cyber Informedness: A New Metric Using CVSS to Increase Trust in Intrusion Detection Systems. ACM International Conference Proceeding Series. https://doi.org/10.1145/3590777.3590786

Fan, Z. (2021). The evaluation of bank credit is based on the improved decision tree model. ACM International Conference Proceeding Series. https://doi.org/10.1145/3482632.3487479

Guo, W. (2022). Applications of Logistic Regression and Naive Bayes in Commodity Sentiment Analysis. ACM International Conference Proceeding Series. https://doi.org/10.1145/3531232.3531265

Herrera, J. A., Camargo, J. E., & Torre, J. I. M. (2022). Network anomaly detection with machine learning techniques for SDN networks. ACM International Conference Proceeding Series. https://doi.org/10.1145/3535735.3535750

Lei, G., Su, S., & Liao, W. (2021). Classification of credit card holders based on random forest algorithm. ACM International Conference Proceeding Series. https://doi.org/10.1145/3453800.3453806

Liu, B., Huang, Z., & Zhu, Z. (2022). Intrusion Detection System Based on Machine Learning. ICCSIE ’22: Proceedings of the 7th International Conference on Cyber Security and Information Engineering, pp. 121–125. https://doi.org/10.1145/3558819.3558840

Meftah, S., Rachidi, T., & Assem, N. (2019). Network-based intrusion detection using the UNSWNB15 dataset. International Journal of Computing and Digital Systems, 8(5). https://doi.org/10.12785/ijcds/080505

Mehta, J., Richard, G., Lugosch, L., Yu, D., & Meyer, B. H. (2023). DT-DS: CAN Intrusion Detection with Decision Tree Ensembles. ACM Transactions on Cyber-Physical Systems, 7(1). https://doi.org/10.1145/3566132

Mohamed, M. A., & Mohamud, M. A. (2022). Data Analysis of Agriculture using Data Mining Techniques. ACM International Conference Proceeding Series. https://doi.org/10.1145/3549206.3549226

Nagaraja, A., Boregowda, U., & Radhakrishna, V. (2021). Regression analysis for network intrusion detection. ACM International Conference Proceeding Series. https://doi.org/10.1145/3460620.3460751

Schlag, S., Schmitt, M., & Schulz, C. (2021). Faster Support Vector Machines. ACM Journal of Experimental Algorithmics, 26. https://doi.org/10.1145/3484730

Shah, S., Muhuri, P. S., Yuan, X., Roy, K., & Chatterjee, P. (2021). Implementing a network intrusion detection system using a semi-supervised support vector machine and random forest. Proceedings of the 2021 ACMSE Conference - ACMSE 2021: The Annual ACM Southeast Conference. https://doi.org/10.1145/3409334.3452073

Sharafaldin, I., Lashkari, A. H., Hakak, S., & Ghorbani, A. A. (2019). Developing realistic distributed denial of service (DDoS) attack dataset and taxonomy. Proceedings - International Carnahan Conference on Security Technology, 2019-October. https://doi.org/10.1109/CCST.2019.8888419

Shewalkar, A., Nyavanandi, D., & Ludwig, S. A. (2019). Performance Evaluation of Deep neural networks Applied to Speech Recognition: Rnn, LSTM and GRU. Journal of Artificial Intelligence and Soft Computing Research, 9(4). https://doi.org/10.2478/jaiscr-2019-0006

Song, J., Takakura, H., Okabe, Y., Eto, M., Inoue, D., & Nakao, K. (2011). Statistical analysis of honeypot data and building of Kyoto 2006+ dataset for NIDS evaluation. Proceedings of the 1st Workshop on Building Analysis Datasets and Gathering Experience Returns for Security,

BADGERS 2011. https://doi.org/10.1145/1978672.1978676

Tsantekidis, A., Passalis, N., & Tefas, A. (2022). Recurrent neural networks. In Deep Learning for Robot Perception and Cognition. https://doi.org/10.1016/B978-0-32-385787-1.00010-5

Wang, S. (2023). Recognition of English speech - Using a deep learning algorithm. Journal of Intelligent Systems, 32(1). https://doi.org/10.1515/jisys-2022-0236

Yang, L., Cai, M., Duan, Y., & Yang, X. (2019). Intrusion detection based on approximate information entropy for random forest classification. ACM International Conference Proceeding Series. https://doi.org/10.1145/3335484.3335488

Yin, C., Zhu, Y., Fei, J., & He, X. (2017). A Deep Learning Approach for Intrusion Detection Using Recurrent Neural Networks. IEEE Access, 5. https://doi.org/10.1109/ACCESS.2017.2762418

Yu, W., Kim, I. Y., & Mechefske, C. (2021). Analysis of different RNN autoencoder variants for time series classification and machine prognostics. Mechanical Systems and Signal Processing, 149. https://doi.org/10.1016/j.ymssp.2020.107322

Zhang, M., & Qin, X. (2022). Research on Satisfaction Evaluation Model Based on Ordered Logistic Regression. ACM International Conference Proceeding Series. https://doi.org/10.1145/3584748.3584794

Zhao, Y., & Gan, G. (2021). Research on Intrusion Detection Technology Based on Ensemble Learning. ACM International Conference Proceeding Series. https://doi.org/10.1145/3474198.3478139

Zipperle, M., Gottwalt, F., Chang, E., & Dillon, T. (2022). Provenance-based Intrusion Detection Systems: A Survey. ACM Computing Surveys, 55(7). https://doi.org/10.1145/3539605