RT Conference Proceedings
T1 Improving network intrusion detection by means of domain-aware genetic programming
A1 Blasco Alís, Jorge
A1 Orfila Díaz-Pabon, Agustín
A1 Ribagorda Garnacho, Arturo
AB One of the central areas in network intrusion detection is how to build effective systems that are able to distinguish normal from intrusive traffic. In this paper we explore the use of Genetic Programming (GP) for such a purpose. Although GP has already been studied for this task, the inner features of network intrusion detection have been systematically ignored. To avoid the blind use of GP shown in previous research, we guide the search by means of a fitness function based on recent advances on IDS evaluation. For the experimental work we use a well-known dataset (i.e. KDD- 99) that has become a standard to compare research although its drawbacks. Results clearly show that an intelligent use of GP achieves systems that are comparable (and even better in realistic conditions) to top state-of-the-art proposals in terms of effectiveness, improving them in efficiency and simplicity.
PB IEEE
SN 978-1-4244-5879-0
YR 2010
FD 2010-02
LK https://hdl.handle.net/10016/9574
UL https://hdl.handle.net/10016/9574
LA eng
NO Proceeding of: International Conference on Availability, Reliability, and Security, 2010. ARES '10, 15-18 February 2010, Krakow, Poland
NO This work was partially supported by CDTI, Ministerio de Industria, Turismo y Comercio of Spain in collaboration with Telefónica I+D, Project SEGUR@ CENIT-2007 2004
DS e-Archivo
RD 17 jul. 2024