Skip to Main content Skip to Navigation
Conference papers

Nested One-Class Support Vector Machines for Network Intrusion Detection

Abstract : One-class support vector machines (OCSVM) have been recently applied in intrusion detection. Typically, OCSVM is kernelized by radial basis functions (RBF, or Gaussian kernel) whereas selecting Gaussian kernel hyperparameter is based upon availability of attacks, which is rarely applicable in practice. This paper investigates the application of nested OCSVM to detect intruders in network systems with data-driven hyperparameter optimization. The nested OCSVM is able to improve the efficiency over the proposed OCSVM applied in intrusion detection. In addition , the information of the farthest and the nearest neighbors of each sample is used to construct the objective cost instead of labeling based metrics such as geometric mean accuracy. The efficiency of this method is illustrated over the KDD99 dataset whereas the resulting estimated boundary, as well as intrusion detection performance, are comparable with existing methods. The experimental results show that the nested OCSVM method performs better than OCSVM for intrusion detection. The nested OCSVM with 12 density levels achieves 98.28% in accuracy and higher true alarming rate (TP) comparing to OCSVM.
Complete list of metadatas

https://hal.archives-ouvertes.fr/hal-01845761
Contributor : Quoc Thong Nguyen <>
Submitted on : Friday, July 20, 2018 - 3:48:08 PM
Last modification on : Thursday, February 27, 2020 - 1:19:00 AM

Identifiers

Citation

Quoc Thong Nguyen, Kim Phuc Tran, Philippe Castagliola, Thu Huong Truong, Minh Kha Nguyen, et al.. Nested One-Class Support Vector Machines for Network Intrusion Detection. 2018 IEEE Seventh International Conference on Communications and Electronics (ICCE), Jul 2018, Hue, Vietnam. pp.7-12, ⟨10.1109/CCE.2018.8465718⟩. ⟨hal-01845761⟩

Share

Metrics

Record views

552