Machine learning to improve the performance of anomaly-based network intrusion detection in big data

dc.contributor.authorSiriporn Chimphlee
dc.contributor.authorWitcha Chimphlee
dc.contributor.correspondenceW. Chimphlee; Department of Data Science and Analytics, Faculty of Science and Technology, Suan Dusit University, Bangkok, 295 Nakornratchasrima Road, Dusit, Thailand; email: witcha_chi@dusit.ac.th
dc.date.accessioned2025-03-10T07:34:45Z
dc.date.available2025-03-10T07:34:45Z
dc.date.issued2023
dc.description.abstractWith the rapid growth of digital technology communications are overwhelmed by network data traffic. The demand for the internet is growing every day in today's cyber world, raising concerns about network security. Big Data are a term that describes a vast volume of complicated data that is critical for evaluating network patterns and determining what has occurred in the network. Therefore, detecting attacks in a large network is challenging. Intrusion detection system (IDS) is a promising cybersecurity research field. In this paper, we proposed an efficient classification scheme for IDS, which is divided into two procedures, on the CSE-CIC-IDS-2018 dataset, data pre-processing techniques including under-sampling, feature selection, and classifier algorithms were used to assess and decide the best performing model to classify invaders. We have implemented and compared seven classifier machine learning algorithms with various criteria. This work explored the application of the random forest (RF) for feature selection in conjunction with machine learning (ML) techniques including linear regression (LR), k-Nearest Neighbor (k-NN), classification and regression trees (CART), Bayes, RF, multi layer perceptron (MLP), and XGBoost in order to implement IDSS. The experimental results show that the MLP algorithm in the most successful with best performance with evaluation matrix. © 2023 Institute of Advanced Engineering and Science. All rights reserved.
dc.identifier.citationIndonesian Journal of Electrical Engineering and Computer Science
dc.identifier.doi10.11591/ijeecs.v30.i2.pp1106-1119
dc.identifier.issn25024752
dc.identifier.scopus2-s2.0-85149147934
dc.identifier.urihttps://repository.dusit.ac.th//handle/123456789/4570
dc.languageEnglish
dc.publisherInstitute of Advanced Engineering and Science
dc.rightsAll Open Access; Gold Open Access; Green Open Access
dc.rights.holderScopus
dc.subjectClass imbalance
dc.subjectCSE-CIC-IDS-2018
dc.subjectFeature selection
dc.subjectMachine learning
dc.subjectNetwork intrusion detection
dc.titleMachine learning to improve the performance of anomaly-based network intrusion detection in big data
dc.typeArticle
mods.location.urlhttps://www.scopus.com/inward/record.uri?eid=2-s2.0-85149147934&doi=10.11591%2fijeecs.v30.i2.pp1106-1119&partnerID=40&md5=455ad96e79a338e2600329e37cd33667
oaire.citation.endPage1119
oaire.citation.issue2
oaire.citation.startPage1106
oaire.citation.volume30
Files
Collections