An SVM-Based Ensemble Approach for Intrusion Detection

1. Introduction

In the predictive analysis, the output is more quality, clarity, and stable if the input data is consistent in all manner like free from noise, duplicate records and anomaly (Dietterich, 2002). A dataset consists of feature sets, where every feature set is a depiction of an output known as a class label. In Intrusion Detection, the KDDCup99 is a popular benchmarked dataset. The details about the datasets discussed in Section 2. The term interruption refers to any unapproved approach that endeavors to compromise Privacy, Integrity, and Availability (CIA) of the security system. The intruders try to discover the expose in the protection framework, and get ready for attack. Nowadays a variety of penetration testing frameworks are available for vulnerability analysis as well as exploit the target system. As per the Gartner Forecasts (Gartner, 2017) given in Table 1, security spending of worldwide will reach $96 billion in 2018 that is 8% from 2017 (Gartner, 2017). The organizations are spending more on security regarding infrastructure, state of the art detection approach and awareness of emerging threats and their countermeasures. Hence, a lot of research work is carried out to protect the information in the individual as well as enterprise level.

In the digital age where the internet and online services play a vital role, it has become an unavoidable requirement to provide security over the Internet. It is clear that firewalls and anti-viruses are not enough to secure a network completely. Intrusion Detection is used to stop the attacks, recover from them with the minimum loss or analyze the security problems so that the attacks are not repeated. Nowadays' artificial intelligence, information mining, and machine learning calculations have been enslaved to expand investigation on ID with weight on upgrading the exactness of identification and make a safe model for (IDS) to deal with Zero-day or new assault.

Multidisciplinary approaches such as data mining, machine learning, artificial intelligence, big data analytics and deep learning applied to learn the nature and the behavior of the threats and make an immune model to predict them in future. Intrusion Detection (ID) is the procedure of quick espial of undesirable infraction in the system's normal behavior. The objective is to detect the intrusion which is a challenging task. The attacker or hacker changes their sequence of attempts, i.e. patterns/signature. As a result, it is very difficult to detect it. Hence a single detection approach is not sufficient to detect this kind of threats. Therefore, ensemble approaches come into the picture that combines multiple detection approaches and easily detects the novel attacks.

Source: Gartner (2017)