Improved Intrusion Detection System That Uses Machine Learning Techniques to Proactively Defend DDoS Attack

Abstract

This abstract aims to provide a comprehensive analysis of the intricacies of DDoS attacks, which are increasingly prevalent and malicious cyber-attacks that disrupt the normal flow of traffic to a targeted server by exponentially increasing network traffic. To secure distributed systems against DDoS attacks, intrusion detection mechanisms and machine learning techniques are commonly employed. The CICDDoS2019 dataset is often utilized for the detection and prevention of these attacks. The dataset undergoes pre-processing and is split into training and test datasets. Machine learning techniques are then utilized to predict and classify the attacks using the test dataset. The protocols which are examined during the attack are SNMP, NTP, UDP, and DNS. The accuracy is obtained by comparing the predicted results with the training dataset. Machine learning algorithms such as K- Nearest Neighbor(K-NN)-96.49%, Support Vector Machine (SVM)-79.61%, Random Forest (RF)-99.10%, and Gaussian Naïve Bayes (GNB)-78.75% have been found to produce high levels of accuracy for attack classification.