Feature selection using rough-dpso in anomaly intrusion detection
Most of the existing IDS use all the features in network packet to evaluate and look for known intrusive patterns. Some of these features are irrelevant and redundant. The drawback to this approach is a lengthy detection process. In real-time environment this may degrade the performance of an IDS. T...
Saved in:
| Main Authors: | , , |
|---|---|
| Format: | Book Section |
| Published: |
Springer Berlin / Heidelberg
2007
|
| Subjects: | |
| Online Access: | http://eprints.utm.my/id/eprint/6716/ http://www.springerlink.com/content/f7gg9x253q767337/fulltext.pdf |
| Tags: |
Add Tag
No Tags, Be the first to tag this record!
|
| Institution: | Universiti Teknologi Malaysia |
| Summary: | Most of the existing IDS use all the features in network packet to evaluate and look for known intrusive patterns. Some of these features are irrelevant and redundant. The drawback to this approach is a lengthy detection process. In real-time environment this may degrade the performance of an IDS. Thus, feature selection is required to address this issue. In this paper, we use wrapper approach where we integrate Rough Set and Particle Swarm to form a 2-tier structure of feature selection process. Experimental results show that feature subset proposed by Rough-DPSO gives better representation of data and they are robust.
|
|---|