Borderline SMOTE Algorithm and Feature Selection-Based Network Anomalies Detection Strategy

This paper proposes a novel network anomaly detection framework based on data balance and feature selection. Different from the previous binary classification of network intrusion, the network anomaly detection strategy proposed in this paper solves the problem of multiple classification of network...

Full description

Saved in:
Bibliographic Details
Published inEnergies (Basel) Vol. 15; no. 13; p. 4751
Main Authors Sun, Yong, Que, Huakun, Cai, Qianqian, Zhao, Jingming, Li, Jingru, Kong, Zhengmin, Wang, Shuai
Format Journal Article
LanguageEnglish
Published Basel MDPI AG 01.07.2022
Subjects
Online AccessGet full text
ISSN1996-1073
1996-1073
DOI10.3390/en15134751

Cover

More Information
Summary:This paper proposes a novel network anomaly detection framework based on data balance and feature selection. Different from the previous binary classification of network intrusion, the network anomaly detection strategy proposed in this paper solves the problem of multiple classification of network intrusion. Regarding the common data imbalance of a network intrusion detection set, a resampling strategy generated by random sampling and Borderline SMOTE data is developed for data balance. According to the features of the intrusion detection dataset, feature selection is carried out based on information gain rate. Experiments are carried out on three basic machine learning algorithms (K-nearest neighbor algorithm (KNN), decision tree (DT), random forest (RF)), and the optimal feature selection scheme is obtained.
Bibliography:ObjectType-Article-1
SourceType-Scholarly Journals-1
ObjectType-Feature-2
content type line 14
ISSN:1996-1073
1996-1073
DOI:10.3390/en15134751