Constructing Predictive Model for Network Intrusion Detection

ISBN-13: 9783659300561 / Angielski / Miękka / 2012 / 160 str.

Akal Tigabu Dagne

Opis

While advances in computer and communications technology have made the network ubiquitous, they have also rendered networked systems vulnerable to malicious attacks devised from a distance. Nowadays, system administrators and network professionals can attempt to prevent such attacks by developing intrusion detection tools. In this study, the experiments were conducted following the Knowledge Discovery in Database process model. A total of 21,533 intrusion records are used for training the models. For validating the performance of the selected model a separate 3,397 records are used as a testing set. The model that was created using 10-fold cross validation using the J48 decision tree algorithm with the default parameter values showed the best classification accuracy. The model has a prediction accuracy of 96.11% on the training datasets and 93.2% on the test dataset to classify the new instances. The findings of this study have shown that the data mining methods generates interesting rules that are crucial for intrusion detection and prevention in the networking industry. Future research directions are forwarded to come up an applicable system in the area of the study.

O autorze

Tigabu D.(B.Sc.degree in Computer Science from Jimma University, M.Sc.degree in Information Science from Addis Ababa University). Tigabu has CCNA and CCNP International certificates from Cisco System,USA. Currently, he is a Lecturer at Department of Computer Science and Network Engineer at ICT Directorate Office, University of Gondar, Ethiopia.