An efficient network intrusion detection method based on information theory and genetic algorithm

Tao Xia, Guangzhi Qu, Salim Hariri, Mazin Yousif

Research output: Contribution to conferencePaper

45 Scopus citations

Abstract

The Internet has been growing at an amazing rate and concurrent with the growth, the vulnerability of the Internet is also increasing. Though the Internet has been designed to withstand various forms of failure, the intrusion tools and attacks are becoming increasingly sophisticated, exposing the Internet to new threats. To make networked systems reliable and robust it becomes highly essential to develop on-line monitoring, analysis, and quantification of the behavior of networks under a wide range of attacks and to recover from these attacks. In this paper, we present a hybrid method based on information theory and genetic algorithm to detect network attacks. Our approach uses information theory to filter the traffic data and thus reduce the complexity. We use a linear structure rule to classify the network behaviors into normal and abnormal behaviors. We apply our approach to the kdd99 benchmark dataset and obtain high detection rate of 99.25% as well as low false alarm rate of 1.66%.

Original languageEnglish (US)
Pages11-17
Number of pages7
StatePublished - Dec 12 2005
Event24th IEEE International Performance, Computing, and Communications Conference, IPCCC 2005 - Phoenix, AZ, United States
Duration: Apr 7 2005Apr 9 2005

Other

Other24th IEEE International Performance, Computing, and Communications Conference, IPCCC 2005
CountryUnited States
CityPhoenix, AZ
Period4/7/054/9/05

ASJC Scopus subject areas

  • Engineering(all)

Fingerprint Dive into the research topics of 'An efficient network intrusion detection method based on information theory and genetic algorithm'. Together they form a unique fingerprint.

  • Cite this

    Xia, T., Qu, G., Hariri, S., & Yousif, M. (2005). An efficient network intrusion detection method based on information theory and genetic algorithm. 11-17. Paper presented at 24th IEEE International Performance, Computing, and Communications Conference, IPCCC 2005, Phoenix, AZ, United States.