Combining feature selection and local modelling in the KDD cup 99 dataset

Abstract

In this work, a new approach for intrusion detection in computer networks is introduced. Using the KDD Cup 99 dataset as a benchmark, the proposed method consists of a combination between feature selection methods and a novel local classification method. This classification method -called FVQIT (Frontier Vector Quantization using Information Theory)- uses a modified clustering algorithm to split up the feature space into several local models, in each of which the classification task is performed independently. The method is applied over the KDD Cup 99 dataset, with the objective of improving performance achieved by previous authors. Experimental results obtained indicate the adequacy of the proposed approach. © 2009 Springer Berlin Heidelberg.