A feature reduced intrusion detection system using ANN classifier

• Published in: Expert systems with applications Vol. 88; pp. 249 - 257
• Main Authors: Akashdeep, Manzoor, Ishfaq, Kumar, Neeraj
• Format: Journal Article
• Language: English
• Published: New York Elsevier Ltd 01.12.2017; Elsevier BV
• Subjects: Access control; ANN; Computer networks; Cybersecurity; Datasets; Feature Ranking; Feature Reduction; Intrusion Detection System (IDS); Intrusion detection systems; Network security; Neural networks; Performance measurement; Reduction; Training; Feature Reduction; ANN; Feature Ranking; Intrusion Detection System (IDS)
• ISSN: 0957-4174; 1873-6793
• DOI: 10.1016/j.eswa.2017.07.005

•A Feature reduced Intrusion Detection System has been proposed.•Pre-processing is done to compensate less occurring and frequent occurring attacks.•Feature reduction has been done on basis of information gain and correlation.•A classifier based on artificial neural network has been used.•Comparison with state of art methods has been done. Rapid increase in internet and network technologies has led to considerable increase in number of attacks and intrusions. Detection and prevention of these attacks has become an important part of security. Intrusion detection system is one of the important ways to achieve high security in computer networks and used to thwart different attacks. Intrusion detection systems have curse of dimensionality which tends to increase time complexity and decrease resource utilization. As a result, it is desirable that important features of data must be analyzed by intrusion detection system to reduce dimensionality. This work proposes an intelligent system which first performs feature ranking on the basis of information gain and correlation. Feature reduction is then done by combining ranks obtained from both information gain and correlation using a novel approach to identify useful and useless features. These reduced features are then fed to a feed forward neural network for training and testing on KDD99 dataset. Pre-processing of KDD-99 dataset has been done to normalize number of instances of each class before training. The system then behaves intelligently to classify test data into attack and non-attack classes. The aim of the feature reduced system is to achieve same degree of performance as a normal system. The system is tested on five different test datasets and both individual and average results of all datasets are reported. Comparison of proposed method with and without feature reduction is done in terms of various performance metrics. Comparisons with recent and relevant approaches are also tabled. Results obtained for proposed method are really encouraging.