Overview on Intrusion Detection Systems Design Exploiting Machine Learning for Networking Cybersecurity

Journal Article

EUPEX partner University of Pisa, together with Shandong Management University and University of Tunis, published this paper in Applied Sciences.

Abstract

The Intrusion Detection System (IDS) is an effective tool utilized in cybersecurity systems to detect and identify intrusion attacks. With the increasing volume of data generation, the possibility of various forms of intrusion attacks also increases. Feature selection is crucial and often necessary to enhance performance. The structure of the dataset can impact the efficiency of the machine learning model. Furthermore, data imbalance can pose a problem, but sampling approaches can help mitigate it. This research aims to explore machine learning (ML) approaches for IDS, specifically focusing on datasets, machine algorithms, and metrics. Three datasets were utilized in this study: KDD 99, UNSW-NB15, and CSE-CIC-IDS 2018. Various machine learning algorithms were chosen and examined to assess IDS performance. The primary objective was to provide a taxonomy for interconnected intrusion detection systems and supervised machine learning algorithms. The selection of datasets is crucial to ensure the suitability of the model construction for IDS usage. The evaluation was conducted for both binary and multi-class classification to ensure the consistency of the selected ML algorithms for the given dataset. The experimental results demonstrated accuracy rates of 100% for binary classification and 99.4In conclusion, it can be stated that supervised machine learning algorithms exhibit high and promising classification performance based on the study of three popular datasets.

Authors: Pierpaolo Dini (University of Pisa), Abdussalam Elhanashi (University of Pisa), Andrea Begni (University of Pisa), Sergio Saponara (University of Pisa), Qinghe Zheng (Shandong Management University) and Kaouther Gasmi (University of Tunis)

DOI: 10.3390/app13137507