Authors: Shubha Puthran; Ketan Shah
Addresses: MPSTME, NMIMS University, Mumbai, India ' MPSTME, NMIMS University, Mumbai, India
Abstract: Intrusion detection plays very important role in securing information servers. Classification and clustering data mining algorithms are very effective to deal with intrusion detection. However, classification (supervised) results with false negative detection and clustering (unsupervised) results with false positive detection. This paper introduces a unique framework consisting of pre-processing unit, intrusion detection using quad split (IDTQS), intrusion detection using correlation-based quad split (IDTCA) and intrusion detection using clustering (IDTC). In this proposed framework, IDTQS and IDTCA shows accuracy improvement for University of New South Wales (UNSW) dataset is in the range 4%-34% for DoS, probe, R2L, U2R and normal classes. IDTC clustering algorithm performs with 97% accuracy. Training and testing time is improved by 14% for IDTCA in comparison with IDTQS.
Keywords: quad split; decision tree; correlated attributes; UNSW dataset.
International Journal of Computational Intelligence Studies, 2020 Vol.9 No.4, pp.292 - 306
Received: 25 Apr 2018
Accepted: 13 Nov 2018
Published online: 16 Oct 2020 *