Counselors network for intrusion detection

Autor: Daniel Mosse, Silvio E. Quincozes, Célio Albuquerque, Raul Ceretta Nunes, Diego Passos, Carlos Raniery
Rok vydání: 2020
Předmět:
Zdroj: International Journal of Network Management. 31
ISSN: 1099-1190
1055-7148
DOI: 10.1002/nem.2111
Popis: Intrusion detection systems (IDSs) are a fundamental component of defense solutions. In particular, IDSs aim to detect malicious activities on computer systems and networks by relying on data classification models built from a training dataset. However, classifiers' performance can vary for each attack pattern. A common technique to overcome this issue is to use ensemble methods, where multiple classifiers are employed and a final decision is taken combining their outputs. Despite the potential advantages of such an approach, its usefulness is limited in scenarios where (i) multiple expert classifiers present divergent results, (ii) all classifiers present poor results due to lack of representative features, or (iii) detectors have insufficient labeled signatures to train their classifiers for a specific attack pattern. In this work, we introduce the concept of a counselors network to deal with conflicts from different classifiers by exploiting the collaboration among IDSs that analyze multiple and heterogeneous data sources. Empirical results demonstrate the feasibility of the proposed architecture in improving the accuracy of the intrusion detection process.
Databáze: OpenAIRE
Externí odkaz: