Feature selection using information gain for improved structural-based alert correlation

• Main Authors: Alhaj, T. A., Siraj, M. M., Zainal, A., Elshoush, H. T., Elhaj, F.
• Format: Article
• Language: English
• Published: Public Library of Science 2016
• Subjects: QA75 Electronic computers. Computer science
• Online Access: http://eprints.utm.my/id/eprint/71959/7/AnazidaZainal2016_FeatureSelectionusingInformationGain.pdf; http://eprints.utm.my/id/eprint/71959/; https://www.scopus.com/inward/record.uri?eid=2-s2.0-84998705814&doi=10.1371%2fjournal.pone.0166017&partnerID=40&md5=9ac511beaa64f2471387c37e3f9855c1
• Institution: Universiti Teknologi Malaysia

Grouping and clustering alerts for intrusion detection based on the similarity of features is referred to as structurally base alert correlation and can discover a list of attack steps. Previous researchers selected different features and data sources manually based on their knowledge and experience...