Artificial intelligence in network intrusion detection

Abstract

In past, detection of network attacks has been almost solely done by human operators. They anticipated network anomalies in front of consoles, where based on their expert knowledge applied necessary security measures. With the exponential growth of network bandwidth, this task slowly demanded substantial improvements in both speed and accuracy. One proposed way how to achieve this is the usage of artificial intelligence (AI), progressive and promising computer science branch, particularly one of its sub-fields -machine learning (ML) -where main idea is learning from data. In this paper authors will try to give a general overview of AI algorithms, with main focus on their usage for network intrusion detection.

A Comparative Study of Data Mining Algorithms for High Detection Rate in Intrusion Detection System

“…The question is how to make our networks secure from such threats. Intrusion Detection System (IDS) is designed for this purpose [1,2].…”

“…The most prominent problem of the traditional IDS is their incompetence to identify unique or unfamiliar attacks, as they are signature based [2]. Also, the problem that currently faces in Intrusion Detection System (IDS) is high false positives (FP) and high false negatives (FN).…”

“…It identifies both misuse attacks and intrusion attacks data. Intrusion attacks are those attacks that come from outdoor the institution, and misuse attacks come from inside the institution [2]. Two types of IDS are:…”

“…The agents monitor the local operating system and alert the user or administrator if any suspicious activity is detected. H-IDS can only monitor the activities of the individual hosts on which the software application or agent is installed [2,5]. In this review paper, we will pay attention to N-IDS approach.…”

“…It is also known as behaviour-based IDS. It is more responsive to new threats than the signature-based IDS but difficult to implement [2,5]. Now the question is how IDS reacts to the detected threat?…”