Model-Based Feature Selection for Developing Network Attack Detection and Alerting System

Jurnal RESTI: Rekayasa Sistem dan Teknologi Informasi

article

Yuri Prihantono¹  Kalamullah Ramli¹ 

[1] Universitas Indonesia

关键词: Machine Learning;    Feature Selection;    IDS;    Snort;    ELK Stack;   

DOI  :  10.29207/resti.v6i2.3989

来源: Ikatan Ahli Indormatika Indonesia

【 摘 要 】

Intrusion Detection Systems (IDS) still have unresolved problems, namely the lack of accuracy in attack detection, resulting in false-positive problems and many false alarms. Machine learning is one way that is often utilized to overcome challenges that arise during the implementation of IDS. We present a system that uses a machine learning approach to detect network attacks and send attack alerts in this study. The CSE-CICIDS2018 Dataset and Model-Based Feature Selection technique are used to assess the performance of eight classifier algorithms in identifying network attacks to determine the best algorithm. The resulting XGBoost Model is chosen as the model that provides the highest performance results in this comparison of machine learning models, with an accuracy rate of 99 percent for two-class classification and 98.4 percent for multi-class classification.

【 授权许可】

Unknown