Improved real-time discretize network intrusion detection system

Abstract

Intrusion detection systems (IDSs) is an essential key for network defense. Many classification algorithms have been proposed for the design of network IDS. Data preprocessing is a common phase to the classification learning algorithm, which leads to improve the network IDS performance. One of the important data preprocessing steps is discretization, where continuous features are converted into nominal ones. This paper addresses the impact of applying discretization on building network IDS. Furthermore, it explores the impact of the quality of the classification algorithms when combining discretization with genetic algorithm (GA) as a feature selection method for network IDS. In order to evaluate the performance of the introduced network IDS, several classifiers algorithms; rules based classifiers (Ridor, Decision table), trees classifiers (REPTree, C 4.5, Random Forest) and Naïve bays classifier are used. Several groups of experiments are conducted and demonstrated on the NSL-KDD dataset. Experiments show that discretization has a positive influence on the time to classify the test instances. Which is an important factor if real time network IDS is desired. © 2013 Springer.