Supervised Learning Techniques for Intrusion Detection System based on Multi-layer Classification Approach

Abstract

The goal of this study is to discover a solution to two problems: first, the signature-based intrusion detection system SNORT can identify a new attack signature without human intervention; and second, signature-based IDS cannot detect multi-stage attacks. The interesting aspect of this study is the growing ways to address the aforementioned issues. We introduced a multi-layer classification strategy in this study, in which we employ two layers, the first of which is based on a decision tree, and the second of which includes machine learning technique fuzzy logic and neural networks. If the first layer fails to identify fresh attacks, the second layer takes over and detects new signature assaults, updating the SNORT signature automatically