.png){kind=icon}
返回
Comparative research on network intrusion detection methods based on machine learning
.png){kind=icon}
PRE
AI
DOI：10.1016/j.cose.2022.102861.png)
.png){kind=icon}
原文求助.png){kind=icon}
分享.png){kind=icon}
收藏
摘要
En 中文
Network intrusion detection system is an essential part of network security research. It detects intrusion behaviors through active defense technology and takes emergency measures such as alerting and terminating intrusions. With the rapid development of machine learning technology, more and more researchers apply machine learning algorithms to network intrusion detection to improve detection efficiency and accuracy. Due to the different principles of various algorithms, they also have their advantages and disadvantages. To construct the dominant algorithm model in the field of network intrusion detection and provide the accuracy value, this paper systematically combs the application literature of machine learning algorithms in intrusion detection in the past ten years. A review is made from three categories: traditional machine learning, ensemble learning, and deep learning. Then, this paper selects the KDD CUP99 and NSL-KDD datasets to conduct comparative experiments on decision trees, Naive Bayes, support vector machines, random forests, XGBoost, convolutional neural networks, and recurrent neural networks. The detection accuracy, F1, AUC, and other indicators of these algorithms on different data sets are compared. The experimental results show that the effect of the ensemble learning algorithm is generally better. The Naive Bayes algorithm has low accuracy in recognizing the learned data, but it has obvious advantages when facing new types of attacks, and the training speed is faster. The deep learning algorithm is not particularly prominent in this experiment, but its optimal results are affected by the structure, hyperparameters, and the number of training iterations, which need further in-depth study. Finally, the main challenges facing the current network intrusion detection field are summarized, and the future research directions have been prospected. (C) 2022 Elsevier Ltd. All rights reserved.
Keyword:
Network intrusion detection
Machine learning
Deep learning
Comparative experiment
期刊
C
IF:
5.4
论文数:
4.6K
被引数:
1.4W
机构
引用论文
An intrusion detection and alert correlation approach based on revising probabilistic classifiers using expert knowledge.png)
APPLIED INTELLIGENCE
APPLIED INTELLIGENCEIF3.5
PREAI
分享收藏IEEE 1815.1-Based Power System Security With Bidirectional RNN-Based Network Anomalous Attack Detection for Cyber-Physical SystemIEEE ACCESS
OAAI
IEEE ACCESSIF3.6
OAAI分享收藏State-of-the-art review of soft computing applications in underground excavations软计算在地下开挖中的应用现状综述GEOSCIENCE FRONTIERSOAAI
GEOSCIENCE FRONTIERSIF8.9
OAAI分享收藏
查看更多内容