• DocumentCode
    3003900
  • Title

    Comparison of Machine Learning algorithms performance in detecting network intrusion

  • Author

    Jalil, Kamarularifin Abd ; Kamarudin, Muhammad Hilmi ; Masrek, Mohamad Noorman

  • Author_Institution
    Fac. of Comput. & Math. Sci., Univ. Teknol. MARA, Shah Alam, Malaysia
  • fYear
    2010
  • fDate
    11-12 June 2010
  • Firstpage
    221
  • Lastpage
    226
  • Abstract
    Organization has come to realize that network security technology has become very important in protecting its information. With tremendous growth of internet, attack cases are increasing each day along with the modern attack method. One of the solutions to this problem is by using Intrusion Detection System (IDS). Machine Learning is one of the methods used in the IDS. In recent years, Machine Learning Intrusion Detection system has been giving high accuracy and good detection on novel attacks. In this paper the performance of a Machine Learning algorithm called Decision Tree (J48) is evaluated and compared with two other Machine Learning algorithms namely Neural Network and Support Vector Machines which has been conducted by A. Osareh [1] for detecting intrusion. The algorithms were tested based on accuracy, detection rate, false alarm rate and accuracy of four categories of attacks. From the experiments conducted, it was found that the Decision tree (J48) algorithm outperformed the other two algorithms.
  • Keywords
    decision trees; learning (artificial intelligence); neural nets; security of data; support vector machines; decision tree algorithm; intrusion detection system; machine learning algorithms performance; network intrusion detection; network security technology; neural network; support vector machines; Decision trees; Information security; Internet; Intrusion detection; Machine learning; Machine learning algorithms; Neural networks; Protection; Support vector machines; Testing; Decision Tree; KDD 99; Machine Learning; Neural Network; Support Vector Machines;
  • fLanguage
    English
  • Publisher
    ieee
  • Conference_Titel
    Networking and Information Technology (ICNIT), 2010 International Conference on
  • Conference_Location
    Manila
  • Print_ISBN
    978-1-4244-7579-7
  • Electronic_ISBN
    978-1-4244-7578-0
  • Type

    conf

  • DOI
    10.1109/ICNIT.2010.5508526
  • Filename
    5508526