Rule based Network Intrusion Detection using Genetic Algorithm

International Journal of Computer ApplicationsPublished 31 March 2011Open access

M. Sadiq Ali Khan

Citations45

TL;DR

It is found that accuracy of rule based learning increases with the number of iteration, and network Intrusion Detection based on rules formulation is an efficient approach to classify various type of attack.

Abstract

The rapid increase of information technology usage demands the high level of security in order to keep the data resources and equipments of the user secure. In this current era of networks, there is an eventual stipulate for development of consistent, extensible, easily manageable and have low maintenance cost solutions for Intrusion Detection. Network Intrusion Detection based on rules formulation is an efficient approach to classify various type of attack. DoS or Probing attack are relatively more common and can be detected more accurately if contributing parameters are formulated in terms of rules. Genetic Algorithm is used to devise such rule. It is found that accuracy of rule based learning increases with the number of iteration.

Keywords

Computer Science

Intrusion detection via static analysis

647 Citations2002David Wagner, Ralph A. Dean

It is shown how static analysis may be used to automatically derive a model of application behavior and the result is a host-based intrusion detection system with three advantages: a high degree of automation, protection against a broad class of attacks based on corrupted code, and the elimination of false alarms.

Genetic algorithms with dynamic niche sharing for multimodal function optimization

313 Citations2002Brad L. Miller, Michael J. Shaw

Dynamic niche sharing is developed that is able to efficiently identify and search multiple niches (peaks) in a multimodal domain and perform better than two other methods for multiple optima identification, standard sharing and deterministic crowding.

IEEE Transactions on Systems Man and Cybernetics - Part A Systems and HumansProbabilistic techniques for intrusion detection based on computer audit data

221 Citations2001Nong Ye, Xiang‐Yang Li +3 more

Unless the scalability problem of complex data models taking into account the ordering property of activity data is solved, intrusion detection techniques based on the frequency property provide a viable solution that produces good intrusion detection performance with low computational overhead.

International Journal of Information SecurityIntrusion and intrusion detection

202 Citations2001John McHugh

The history of intrusion and intrusion detection from the early 1970s to the present day is traced and the two primary intrusion detection techniques, anomaly detection and signature-based misuse detection, are described in some detail.

Runtime execution monitoring (REM) to detect and prevent malicious code execution

58 Citations2004A.M. Fiskiran, R.B. Lee

This paper presents an architectural technique, which is called runtime execution monitoring (REM), to detect program flow anomalies associated with such malicious code, and can monitor instructions whose behavior is typically exploited by malicious code.

IEEE Transactions on Dependable and Secure ComputingEfficient Fault Detection and Diagnosis in Complex Software Systems with Information-Theoretic Monitoring

38 Citations2011Miao Jiang, Mohammad A. Munawar +2 more

This paper uses Normalized Mutual Information (NMI) as a similarity measure to identify clusters of correlated metrics, without assuming any specific form for the metric relationships, and shows that stable, nonlinear correlations exist and can be captured with this approach.

Journal of Artificial Evolution and ApplicationsAn Evolutionary Method for Combining Different Feature Selection Criteria in Microarray Data Classification

21 Citations2009Nicoletta Dessì, Barbara Pes

This paper proposes using an evolutionary algorithm to select relevant gene subsets in order to further use them for the classification task by combining valuable results from different feature ranking methods into feature pools whose dimensionality is reduced by a wrapper approach involving a genetic algorithm and SVM classifier.

View PDF

Distributed intrusion detection using mobile agents against DDoS attacks

14 Citations2008Uğur Akyazı, A. Şima Uyar

Four different distributed intrusion detection methods to detect DDoS attacks in the MIT DARPA LLDOS 1.0 dataset are proposed and tested and one of the methods is shown to be better than the others.

Study on Adaptive Intrusion Detection Engine Based on Gene Expression Programming Rules

6 Citations2008Wan Tang, Yang Cao +2 more

A Constraint-based gene expression programming rule extraction algorithm (CGREA) is proposed which guarantees the validity of rules and reduces the evolution time through grammar constraint and probability restriction, and an adaptive intrusion detection engine (AIDE) is applied to automatically renew the detected order of rules according to the performance metric.

A Fast Time Scale Genetic Algorithm based Image Segmentation using Cellular Neural Networks (CNN)

6 Citations2007Santhosh Kumar S, J. Vignesh +4 more

A novel approach for image segmentation using genetic algorithm (GA) implemented in cellular neural networks (CNNUM) using the highly parallel nature of the CNN structure and its speed outperforms traditional digital computers.