In this paper, we analyze existing feature selection methods to identify the key elements of network traffic data that allow intrusion detection. In addition, we propose a new feature selection method that addresses the challenge of considering continuous input features and discrete target values. We show that the proposed method performs well against the benchmark selection methods. We use our findings to develop a highly effective machine learning-based detection systems that achieves 99.9% accuracy in distinguishing between DDoS and benign signals. We believe that our results can be useful to experts who are interested in designing and building automated intrusion detection systems.
翻译:在本文中,我们分析现有的特征选择方法,以确定网络交通数据中允许探测入侵的关键内容;此外,我们提议一种新的特征选择方法,以应对考虑连续输入特征和离散目标值的挑战;我们表明,拟议方法与基准选择方法相比运作良好;我们利用我们的调查结果开发一个高效的基于学习的机器探测系统,在区分DDoS和良性信号方面达到99.9%的准确度;我们认为,我们的结果对于有兴趣设计和建立自动入侵探测系统的专家是有用的。