Nested One-Class Support Vector Machines for Network Intrusion Detection

Abstract : One-class support vector machines (OCSVM) have been recently applied in intrusion detection. Typically, OCSVM is kernelized by radial basis functions (RBF, or Gaussian kernel) whereas selecting Gaussian kernel hyperparameter is based upon availability of attacks, which is rarely applicable in practice. This paper investigates the application of nested OCSVM to detect intruders in network systems with data-driven hyperparameter optimization. The nested OCSVM is able to improve the efficiency over the proposed OCSVM applied in intrusion detection. In addition , the information of the farthest and the nearest neighbors of each sample is used to construct the objective cost instead of labeling based metrics such as geometric mean accuracy. The efficiency of this method is illustrated over the KDD99 dataset whereas the resulting estimated boundary, as well as intrusion detection performance, are comparable with existing methods. The experimental results show that the nested OCSVM method performs better than OCSVM for intrusion detection. The nested OCSVM with 12 density levels achieves 98.28% in accuracy and higher true alarming rate (TP) comparing to OCSVM.
Type de document :
Communication dans un congrès
2018 IEEE Seventh International Conference on Communications and Electronics (ICCE), Jul 2018, Hue, Vietnam. pp.7-12, 〈10.1109/CCE.2018.8465718〉
Liste complète des métadonnées

https://hal.archives-ouvertes.fr/hal-01845761
Contributeur : Thong Nguyen <>
Soumis le : vendredi 20 juillet 2018 - 15:48:08
Dernière modification le : vendredi 9 novembre 2018 - 09:49:21

Identifiants

Collections

Citation

Quoc Thong Nguyen, Kim Phuc Tran, Philippe Castagliola, Thu Huong Truong, Minh Kha Nguyen, et al.. Nested One-Class Support Vector Machines for Network Intrusion Detection. 2018 IEEE Seventh International Conference on Communications and Electronics (ICCE), Jul 2018, Hue, Vietnam. pp.7-12, 〈10.1109/CCE.2018.8465718〉. 〈hal-01845761〉

Partager

Métriques

Consultations de la notice

183