Critical study of neural networks in detecting intrusions Export

@article{citeulike:3039934, abstract = {This paper presents a critical study about the use of some neural networks (NNs) to detect and classify intrusions. The aim of our research is to determine which NN classifies well the attacks and leads to the higher detection rate of each attack. This study focused on two classification types of records: a single class (normal, or attack), and a multiclass, where the category of attack is also detected by the NN. Five different types of NNs were tested: multilayer perceptron (MLP), generalized feed forward (GFF), radial basis function (RBF), self-organizing feature map (SOFM), and principal component analysis (PCA) NN. A KDD data subset containing 18,285 records manually chosen was trained in order to be tested on the KDD testing set. Our simulations show that the GFF NN leads to the best confusion matrix in the multiclass case. For the same case, the RBF performs the higher detection rate of the DoS attack category. In the single class case, the PCA NN performs the higher detection rate.}, author = {Beghdad, Rachid}, citeulike-article-id = {3039934}, citeulike-linkout-0 = {http://dx.doi.org/10.1016/j.cose.2008.06.001}, citeulike-linkout-1 = {http://linkinghub.elsevier.com/retrieve/pii/S0167404808000357}, citeulike-linkout-2 = {http://www.sciencedirect.com/science/article/B6V8G-4SRKMCY-1/1/7bf00bc894f4fd51b104176e25598d31}, doi = {10.1016/j.cose.2008.06.001}, journal = {Computers \& Security}, keywords = {ann, detection, intrusion}, posted-at = {2008-12-16 01:44:41}, priority = {2}, title = {Critical study of neural networks in detecting intrusions}, url = {http://dx.doi.org/10.1016/j.cose.2008.06.001}, volume = {In Press, Corrected Proof} }

TY - JOUR ID - citeulike:3039934 L3 - citeulike-article-id:3039934 N2 - This paper presents a critical study about the use of some neural networks (NNs) to detect and classify intrusions. The aim of our research is to determine which NN classifies well the attacks and leads to the higher detection rate of each attack. This study focused on two classification types of records: a single class (normal, or attack), and a multiclass, where the category of attack is also detected by the NN. Five different types of NNs were tested: multilayer perceptron (MLP), generalized feed forward (GFF), radial basis function (RBF), self-organizing feature map (SOFM), and principal component analysis (PCA) NN. A KDD data subset containing 18,285 records manually chosen was trained in order to be tested on the KDD testing set. Our simulations show that the GFF NN leads to the best confusion matrix in the multiclass case. For the same case, the RBF performs the higher detection rate of the DoS attack category. In the single class case, the PCA NN performs the higher detection rate. JF - Computers & Security TI - Critical study of neural networks in detecting intrusions VL - In Press, Corrected Proof KW - ann KW - detection KW - intrusion AU - Beghdad, Rachid UR - http://dx.doi.org/10.1016/j.cose.2008.06.001 ER -