arrow
Return

Feature selection approach using ensemble learning for network anomaly detection

delete2020-11-05
delete27
delete
OA
AI
M
Mohammad Kazim Hooshmand *
I
Ibrahim Gad
DOI:10.1049/trit.2020.0073delete
deleteOriginal
deleteOriginal request for help
deleteShare
deleteSave
Abstract

Abstract

En 中文
Feature selection is essential for prioritising important attributes in data to improve prediction quality in machine learning algorithms. As different selection techniques identify different feature sets, relying on a single method may result in risky decisions. The authors propose an ensemble approach using union and quorum combination techniques with five primary individual selection methods which are analysis of variance, variance threshold, sequential backward search, recursive feature elimination, and least absolute selection and shrinkage operator. The proposed method reduces features in three rounds: (i) discard redundant features using pairwise correlation, (ii) individual methods select their own feature sets independently, and (iii) equalise individual feature sets. The equalised individual feature sets are combined using union and quorum techniques. Both the combined and individual sets are tested for network anomaly detection using random forest, decision tree, K-nearest neighbours, Gaussian Naive Bayes, and logistic regression classifiers. The experimental results on the UNSW-NB15 data set show that random forest with union and quorum feature sets yields 99 and 99.02% f1_score with minimum 6 and 12 features, respectively. The results on the NSL-KDD data set show that random forest with union and quorum gets 99.34 and 99.21% f1_score with a minimum of 28 and 18 features.
Keywords:
feature selection
decision trees
data mining
pattern classification
security of data
support vector machines
Bayes methods
feature extraction
regression analysis
random forests
machine learning algorithms
primary individual selection methods
recursive feature elimination
absolute selection
shrinkage operator
discard redundant features
individual methods
equalise individual feature sets
equalised individual feature sets
quorum techniques
network anomaly detection
random forest
quorum feature
feature selection approach
ensemble learning

Journal

CAAI Transactions on Intelligence Technology cover
CAAI Transactions on Intelligence Technology
IF:
7.3
Papers:
669
Citations:
2.4K

Organization

M
Mangalore University
Scholars:
881
Papers: 743
Citations: 806
Cited Papers

Cited Papers

SpHnf6, a transcription factor that executes multiple functions in sea urchin embryogenesis
err2004-09-01
err0
PREAI
errOchan Otim; Gabriele Amore; Takuya Minokawa; David R. McClay; Eric H. Davidson
errShare
errSave
err
IF0
err
err0
PREAI
err
errShare
errSave
Chapter 2.8 Long-term simulations of photo-oxidants and particulate matter over Europe with emphasis on North Rhine-Westphalia
err2007-01-01
err0
PREAI
errM. Memmesheimer; S. Wurzler; E. Friese; H.J. Jakobs; H. Feldmann; A. Ebel; C. Kessler; J. Geiger; U. Hartmann; A. Brandt; U. Pfeffer; H.P. Dorn
errShare
errSave
A comprehensive performance evaluation of the air quality model BOLCHEM to reproduce the ozone concentrations over Italy
err2008-02-01
err0
PREAI
errMihaela Mircea; Massimo D’Isidoro; Alberto Maurizi; Lina Vitali; Fabio Monforti; Gabriele Zanini; Francesco Tampieri
errShare
errSave
Emulation of a complex global aerosol model to quantify sensitivity to uncertain parameters
err
IF0
err2011-07-19
err0
errOAAI
errL. A. Lee; K. S. Carslaw; K. Pringle; G. W. Mann; D. V. Spracklen
errShare
errSave
researcher View more