의사결정트리와 인공 신경망 기법을 이용한 침입탐지 효율성 비교 연구
A Comparative Study on the Performance of Intrusion Detection using Decision Tree and Artificial Neural Network Models
2
조회
0
다운로드
3
인용
0
참고문헌
키워드
초록
Currently, Internet is used an essential tool in the business area. Despite this importance, there is a risk of network attacks attempting collection of fraudulence, private information, and cyber terrorism. Firewalls and IDS(Intrusion Detection System) are tools against those attacks. IDS is used to determine whether a network data is a network attack. IDS analyzes the network data using various techniques including expert system, data mining, and state transition analysis. This paper tries to compare the performance of two data mining models in detecting network attacks. They are decision tree (C4.5), and neural network (FANN model). I trained and tested these models with data and measured the effectiveness in terms of detection accuracy, detection rate, and false alarm rate. This paper tries to find out which model is effective in intrusion detection. In the analysis, I used KDD Cup 99 data which is a benchmark data in intrusion detection research. I used an open source Weka software for C4.5 model, and C++ code available for FANN model.
Abstract
Currently, Internet is used an essential tool in the business area. Despite this importance, there is a risk of network attacks attempting collection of fraudulence, private information, and cyber terrorism. Firewalls and IDS(Intrusion Detection System) are tools against those attacks. IDS is used to determine whether a network data is a network attack. IDS analyzes the network data using various techniques including expert system, data mining, and state transition analysis. This paper tries to compare the performance of two data mining models in detecting network attacks. They are decision tree (C4.5), and neural network (FANN model). I trained and tested these models with data and measured the effectiveness in terms of detection accuracy, detection rate, and false alarm rate. This paper tries to find out which model is effective in intrusion detection. In the analysis, I used KDD Cup 99 data which is a benchmark data in intrusion detection research. I used an open source Weka software for C4.5 model, and C++ code available for FANN model.
참고문헌 (24)
- 박대우, "국가사이버보안정책에서 해킹에 대한 소고", 한국정보보호학회논문지, 21(6), pp.24~41 (2011)
- Wu, S, "Data Mining-based Intrusion Detectors", Expert Systems with Applications, 36(3), pp.5605~5612 (2009)
- Bace, R, "Intrusion Detection Systems", NIST Special Publication (2001)
- Singaraju, S, "A Precise Survey on Intrusion Detection Systems" (2012)
- 신대철, "침입탐지 알고리즘 성능 최적화 및 평가 방법론 개발", (사)디지털산업정보학회 논문지, 8(1), pp.125~137 (2012), (사)디지털산업정보학회
- 양환석, "프로토콜 기반 분산 침입탐지시스템 설계 및 구현", (사)디지털산업정보학회 논문지, 8(1), pp.81~87 (2012), (사)디지털산업정보학회
- Beigh, B. M, "Intrusion Detection and Prevention System: Classification and Quick Review", ARPN Journal of Science and Technology, 2(7), pp.661~675 (2012)
- Kumar, Y, "A Review on Information Flow in Intrusion Detection System", International Journal of Computational Engineering and Management, 15(1), pp.91~96 (2012)
- Denning, D. E, "An Intrusion-Detection Model", IEEE Transaction on Software Engineering, 13(2), pp.222~232 (1987)
- Nguyen, H. A, "Application of Data Mining to Network Intrusion Detection: Classifier Selection Model", Challenges for Next Generation Network Operations and Service Management –Lecture Notes in Computer Science, 5297, pp.399~408 (2008)
- Jalil, K. A, "Comparison of Machine Learning Algorithms Performance in Detecting Network Intrusion", Networking and Information Technology 2010 International Conference, pp.221~226 (2010)
- Osareh, A, "Intrusion Detection in Computer Networks Based on Machine Learning Algorithms", International Journal of Computer Science and Network Security, 8(11), pp.15~23 (2008)
- Ibrahim, H. E, "Phases vs. Levels using Decision Trees for Intrusion Detection Systems", International Journal of Computer Science and Information Security, 10(8), pp.1~7 (2012)
- Quinlan, J. R, "C4.5 : Programs for Machine Learning" (1992), Morgan Kaufmann Publishers
- McCulloch, Warren S, "A logical Calculus of the Ideas Immanent in Nervous Activity", The Bulletin of Mathematical Biophysics, 5(4), pp.115~133 (1943)
- Rosenblatt, F, "Principles of Neurodynamics" (1962)
- Widrow, B, "Neurocomputing: Foundations of Research" (1988), MIT Press
- Minsky, M, "Perceptrons" (1969), MIT Press
- Learning Internal Representations by Error Propagation, "Rumelhart, D. E", Institute for Cognitive Science, University of California, ~ (1985)
- Ahn, B. H, "Forward Additive Neural Network Models", PhD, pp.1996
- 이한성, "SVM과 클러스터링 기반 적응형 침입탐지 시스템", 한국지능시스템학회 논문지, 11(3), pp.237~242 (2003), 한국지능시스템학회
- Zarrabi, A, "Internet Intrusion Detection System Service in a Cloud", International Journal of Computer Science Issues, 9(5), pp.308~315 (2012)
- Fares, A. H, "Intrusion Detection: Supervised Machine Learning", Journal of Computing Science and Engineering, 5(4), pp.305~313 (2011)
- "Weka"[URL]