Abstract
As the network is dramatically extended, security has become a significant issue. Various attacks like DoS, R2L, U2R are significantly increasing to affect these networks. Thus, detecting such intrusions or attacks is a major concern. Intrusions are the activities that breach the system's security policy. The paper's objective is to detect malicious network traffic using machine learning techniques by developing an intrusion detection system in order to provide a more secure network. This paper intends to highlight the performance comparison of various machine learning algorithms like SVM, K-Means Clustering, KNN, Decision tree, Logistic Regression, and Random Forest for the detection of malicious attacks based on their detection accuracies and precision score. A detailed analysis of the network traffic features and the experimental results reveal that Logistic Regression provides the most accurate results.
Access this chapter
Tax calculation will be finalised at checkout
Purchases are for personal use only
Similar content being viewed by others
References
Smys, S., Basar, A., Wang, H.: Hybrid intrusion detection system for internet of things (IoT). J. ISMAC 02(04), 190–199 (2020)
Baraneetharan, E.: Role of machine learning algorithms intrusion detection in WSNs: a survey. J. Inf. Technol. Dig. World 02(03), 161–173 (2020)
Sathesh, A.: Enhanced soft computing approaches for intrusion detection schemes in social media networks. J. Soft Comput. Paradigm (JSCP) 1(02), 69–79 (2019)
Vengatesan, K., Kumar, A., Naik, R., Verma, D.K.: Anomaly based novel intrusion detection system for network traffic reduction. In: 2nd International Conference on I-SMAC (IoT in Social, Mobile, Analytics and Cloud), pp. 688–690, Palladam, India (2018)
Gao, W., Morris, T.: On cyber attacks and signature based intrusion detection for modbus based industrial control systems. J. Dig. Forensics Secur. Law 9(1), 37–56 (2014)
Jyothsna, V., Rama Prasad, V.V., Munivara Prasad, K.: A review of anomaly based intrusion detection systems. Int. J. Comput. Appl. 28(7), 26–35 (2011)
Sinclair, C., Pierce, L., Matzner, S.: An application of machine learning to network intrusion detection. In: 15th Annual Computer Security Applications Conference (ACSAC’99), pp. 371–377, Phoenix (1999)
Mulay, S.A., Devale, P.R., Garje, G.V.: Intrusion detection system using support vector machine and decision tree. Int. J. Comput. Appl. 3(3), 40–43 (2010)
Eesa, A.S., Orman, Z., Brifcani, A.M.A.: A novel feature-selection approach based on the cuttlefish optimization algorithm for intrusion detection systems. Expert Syst. Appl. 42(5), 2670–2679 (2015)
Kim, G., Lee, S., Kim, S.: A novel hybrid intrusion detection method integrating anomaly detection with misuse detection. Expert Syst. Appl. 41(4), 1690–1700 (2014)
Dreiseitl, S., Ohno-Machado, L.: Logistic regression and artificial neural network classification models: a methodology review. J. Biomed. Inform. 35(5–6), 352–359 (2002)
Ghosh, P., Mitra, R.: Proposed GA-BFSS and logistic regression based intrusion detection system. In: 3rd International Conference on Computer, Communication, Control and Information Technology (C3IT), pp. 1–6, Hooghly (2015)
Bapat, R., Mandya, A., Liu, X., Abraham, B., Brown, D.E., Kang, H., Veeraraghavan, M.: Identifying malicious botnet traffic using logistic regression. In: Systems and Information Engineering Design Symposium (SIEDS), pp. 266–271, Charlottesville, VA (2018)
Bamakan, S.M.H., Wang, H., Tian, Y., Shi, Y.: An effective intrusion detection framework based on mclp/svm optimized by time-varying chaos particle swarm optimization. Neurocomputing 199, 90–102 (2016)
Ahmad, I., Basheri, M., Iqbal, M.J., Rahim, A.: Performance comparison of support vector machine, random forest, and extreme learning machine for intrusion detection. IEEE Access 6, 33789–33795 (2018)
Tao, P., Sun, Z., Sun, Z.: An improved intrusion detection algorithm based on GA and SVM. IEEE Access 6, 13624–13631 (2018)
Farnaaz, N., Jabbar, M.: Random forest modeling for network intrusion detection system. Proc. Comput. Sci. 89(1), 213–217 (2016)
Repalle, S.A., Kolluru, V.R.: Intrusion detection system using ai and machine learning algorithm. Int. Res. J. Eng. Technol. (IRJET) 4(12), 1709–1715 (2017)
Fayyad, U.M., Piatetsky-Shapiro, G., Smyth, P.: Knowledge discovery and data mining: towards a unifying framework. KDD 96, 82–88 (1996)
Kim, D.S., Park, J.S.: Network-based intrusion detection with support vector machines. In: International Conference on Information Networking ICOIN 2003, Lecture Notes in Computer Science, pp. 747–756, Korea (2003)
Wang, H., Jie, Gu., Wang, S.: An effective intrusion detection framework based on SVM with feature augmentation. Knowl.-Based Syst. 136, 130–139 (2017)
Gupta, S., Mamtora, R.: Intrusion detection system using wireshark. Int. J. Adv. Res. Comput. Sci. Softw. Eng. 2(11), 358–363 (2012)
Tavallaee, M., Bagheri, E., Lu, W., Ghorbani, A.A.: A detailed analysis of the kdd cup 99 data set. In: IEEE Symposium on Computational İntelligence for Security and Defense Applications, pp. 1–6, Otawa (2009)
Arora, A., Peddoju, S.K.: Minimizing network traffic features for Android mobile malware detection. In: 18th ACM International Conference on Distributed Computing and Networking ICDCN'17, no. 32, pp. 1–10, India (2017)
Arora, A., Peddoju, S.K.: Malware detection using network traffic analysis in android based mobile devices. In: 8th International conference on Next Generation Mobile Apps, Services and Technologies, pp. 66–71, India (2014)
Böhning, D.: Multinomial logistic regression algorithm. Annal. Inst. Stat. Math. 44(1), 197–200 (1992)
Al-Sharafat, W.S., Naoum, R.: Development of genetic-based machine learning for network intrusion detection. Int. J. Comput. Inf. Eng. 3(7), 1677–1681 (2009)
Author information
Authors and Affiliations
Corresponding author
Editor information
Editors and Affiliations
Rights and permissions
Copyright information
© 2022 The Author(s), under exclusive license to Springer Nature Singapore Pte Ltd.
About this paper
Cite this paper
Seniaray, S., Jindal, R. (2022). Machine Learning-Based Network Intrusion Detection System. In: Smys, S., Bestak, R., Palanisamy, R., Kotuliak, I. (eds) Computer Networks and Inventive Communication Technologies . Lecture Notes on Data Engineering and Communications Technologies, vol 75. Springer, Singapore. https://doi.org/10.1007/978-981-16-3728-5_13
Download citation
DOI: https://doi.org/10.1007/978-981-16-3728-5_13
Published:
Publisher Name: Springer, Singapore
Print ISBN: 978-981-16-3727-8
Online ISBN: 978-981-16-3728-5
eBook Packages: EngineeringEngineering (R0)