GAB-BBO: Adaptive Biogeography Based Feature Selection Approach for Intrusion Detection

• Published in: International journal of computational intelligence systems Vol. 10; no. 1; pp. 914 - 935
• Main Authors: Guendouzi, Wassila, Boukra, Abdelmadjid
• Format: Journal Article
• Language: English
• Published: Dordrecht Springer Netherlands 2017; Springer
• Subjects: biogeography based optimization; evolutionary state estimation approach; Feature selection; Hamming distance; intrusion detection; NP-hard combinatorial optimization problem; Research Article; Feature selection; intrusion detection; Hamming distance; NP-hard combinatorial optimization problem; evolutionary state estimation approach; biogeography based optimization
• ISSN: 1875-6891; 1875-6883; 1875-6883
• DOI: 10.2991/ijcis.2017.10.1.61

Feature selection is used as a preprocessing step in the resolution of many problems using machine learning. It aims to improve the classification accuracy, speed up the model generation process, reduce the model complexity and reduce the required storage space. Feature selection is an NP-hard combinatorial optimization problem. It is the process of selecting a subset of relevant, non-redundant features from the original ones. Among the works that are proposed to solve this problem, few are dedicated for intrusion detection. This paper presents a new feature selection approach for intrusion detection, using the Biogeography Based Optimization (BBO) algorithm. The approach which is named Guided Adaptive Binary Biogeography Based Optimization (GAB-BBO) uses the evolutionary state estimation (ESE) approach and a new migration and mutation operators. The ESE approach we propose in this paper uses the Hamming distance between the binary solutions to calculate an evolutionary factor f which determines the population diversity. During this process, fuzzy logic is used through a fuzzy classification method, to perform the transition between the numerical f value and four evolutionary states which are : convergence, exploration, exploitation and jumping out. According to the state identified, GAB-BBO adapts the algorithm behavior using a new adaptive strategy. The performances of GAB-BBO are evaluated on benchmark functions and the Kdd’99 intrusion detection dataset. In addition, we use other different datasets for further validation. Comparative study with other algorithms is performed and the results show the effectiveness of the proposed approach.