A Roughset Based Ensemble Framework for Network Intrusion Detection System

Abstract

Designing an effective network intrusion detection system is becoming an increasingly difficult task as the sophistication of the attacks have been increasing every day. Usage of machine learning approaches has been proving beneficial in such situations. Models may be developed based on patterns differentiating attack traffic from network traffic to gain insight into the network activity to identify and report attacks. In this article, an ensemble framework based on roughsets is used to efficiently identify attacks in a multi-class scenario. The proposed methodology is validated on benchmark KDD Cup '99 and NSL_KDD network intrusion detection datasets as well as six other standard UCI datasets. The experimental results show that proposed technique RST achieved better detection rate with low false alarm rate compared to bagging and RSM.