A Layered Approach to Network Intrusion Detection Using Rule Learning Classifiers with Nature-Inspired Feature Selection

  • Ashalata Panigrahi
  • Manas Ranjan Patra
Conference paper
Part of the Advances in Intelligent Systems and Computing book series (AISC, volume 710)


Intrusion detection systems are meant to provide secured network computing environment by protecting against attackers. The challenge in building an intrusion detection model is to deal with unbalanced intrusion datasets, i.e., when one class is represented by a small number of examples (minority class). Most of the time it is observed that the performance of the classification techniques somehow becomes biased toward the majority class due to unequal class distribution. In this work, a layered approach has been proposed to detect network intrusions with the help of certain rule learning classifiers. Each layer is designed to detect an attack type by employing certain nature-inspired search techniques such as ant search, genetic search, and PSO. The performance of the model has been evaluated in terms of accuracy, efficiency, detection rate, and false alarm rate.


Layered approach to intrusion detection Rule-based classifier Ant search Genetic search Particle swarm optimization 


  1. 1.
    Kohavi, R., The Power of Decision Tables. In Proc. of the European Conference on Machine Learning (ECML), LNAI, Springer Verlag, Heraclion, Crete, Greece (1995). 174–189.Google Scholar
  2. 2.
    Sharma, P., Ripple-Down Rules for Knowledge Acquisition in Intelligent System. Journal of Technology and Engineering Sciences Vol. 1 (2009) 52–56.Google Scholar
  3. 3.
    Compton, P., Preston, P. and Kang, B., Local Patching Produces Compact Knowledge Bases. A Future in Knowledge Acquisition Springer Verlag, Berlin, 104–117, 1994.Google Scholar
  4. 4.
    Salzberg, S., A nearest hyperrectangle learning method. Machine Learning (1991). 277–309.Google Scholar
  5. 5.
    Cohen, W.W., Fast effective Rule Induction, In Proc. of the 12th International Conference on Machine Learning (1995). 115–123.Google Scholar
  6. 6.
    Yang, J., Tiyyagura, A., Chen, F., and Honavar, V., Feature Subset Selection for Rule Induction using RIPPER, In Proc. of the Genetic and Evolutionary Computation Conference, Oriando, Florida, USA (1999).Google Scholar
  7. 7.
    Hall, M., and Frank, E., Combining Naïve Bayes and Decision tables, In Proc. of the 21st Florida Artificial Intelligence Society Conference (FLAIRS), Florida, USA (2008), 318–319.Google Scholar
  8. 8.
    Tavallaee, M., Bagheri, E., Lu, W., and Ghorbani, A., A detailed analysis of the KDD CUP 99 data set, In Proc. of the IEEE Symposium on Computational Intelligence in Security and Defense Applications (CISDA-2009), Ottawa (2009), 1–6.Google Scholar

Copyright information

© Springer Nature Singapore Pte Ltd. 2018

Authors and Affiliations

  1. 1.Department of Computer Science & EngineeringVITAMBerhampurIndia
  2. 2.Department of Computer ScienceBerhampur UniversityBerhampurIndia

Personalised recommendations