| Title | On the use of Machine Learning Approaches for the Early Classification in Network Intrusion Detection |
| Publication Type | Conference Paper |
| Year of Publication | 2022 |
| Authors | Guarino, Idio, Bovenzi, Giampaolo, Di Monda, Davide, Aceto, Giuseppe, Ciuonzo, Domenico, Pescapè, Antonio |
| Conference Name | 2022 IEEE International Symposium on Measurements & Networking (M&N) |
| Date Published | jul |
| Keywords | Complexity theory, CSE-CIC-IDS2018, deep packet inspection, early detection, feature extraction, machine learning, machine learning algorithms, network intrusion detection, Organizations, pubcrawl, resilience, Resiliency, Scalability, security, Sensitivity, Training |
| Abstract | Current intrusion detection techniques cannot keep up with the increasing amount and complexity of cyber attacks. In fact, most of the traffic is encrypted and does not allow to apply deep packet inspection approaches. In recent years, Machine Learning techniques have been proposed for post-mortem detection of network attacks, and many datasets have been shared by research groups and organizations for training and validation. Differently from the vast related literature, in this paper we propose an early classification approach conducted on CSE-CIC-IDS2018 dataset, which contains both benign and malicious traffic, for the detection of malicious attacks before they could damage an organization. To this aim, we investigated a different set of features, and the sensitivity of performance of five classification algorithms to the number of observed packets. Results show that ML approaches relying on ten packets provide satisfactory results. |
| Notes | ISSN: 2639-5061 |
| DOI | 10.1109/MN55117.2022.9887775 |
| Citation Key | guarino_use_2022 |
On the use of Machine Learning Approaches for the Early Classification in Network Intrusion Detection