Context. The task of using the ensemble of classifiers to detect DoS attacks in large arrays of network traffic data is solved to withstand<br />attacks on the network.<br />Objective of this paper is to build an ensemble of classifiers that surpasses single classifiers in terms of accuracy.<br />Method. To achieve the formulated goal an algorithm, that indicates the probability of belonging to certain classes, which return a<br />vector of classification scores for each point, is proposed. The peculiarity of the proposed approach is that for each point from the dataset,<br />the predicted class label corresponds to the maximum value among all scores obtained by classification methods for a given point. As<br />classifiers, decision trees, k-nearest neighbors algorithm, support vector machines with various kernel functions, and naпve Bayes are<br />considered. A comparative analysis of the proposed approach with single classifiers is considered using the following metrics: accuracy,<br />precision, recall, and F-measure.<br />Results. The experiments have been performed in R 3.4.1 on the NSL-KDD dataset of network attacks, which was divided into three<br />classes (DoS, normal network behavior and other types of attack).<br />Conclusions. The conducted experiments have confirmed the efficiency of the proposed approach. The most accurate result showed<br />an ensemble of five classifiers. The development of techniques for attacks detection based on an ensemble of classifiers avoids the problems inherent in most approaches since it is capable of detecting both known and new attacks with high accuracy. It can be concluded that the proposed approach for network attacks detection is of practical significance. In order to further study the attacks detection in network<br />traffic, studies will be performed on real Big data sets.
Науковий журнал «Радіоелектроніка, інформатика, управління»
Переглянути архів Інформація| Поле | Співвідношення | |
| ##plugins.schemas.marc.fields.042.name## |
dc |
|
| ##plugins.schemas.marc.fields.720.name## |
Alguliyev, R. M.; Azerbaijan National Academy of Sciences, Baku, Azerbaijan Aliguliyev, R. M.; Azerbaijan National Academy of Sciences, Baku, Azerbaijan Imamverdiyev, Y. N.; Azerbaijan National Academy of Sciences, Baku, Azerbaijan Sukhostat, L. V.; Azerbaijan National Academy of Sciences, Baku, Azerbaijan |
|
| ##plugins.schemas.marc.fields.520.name## |
Context. The task of using the ensemble of classifiers to detect DoS attacks in large arrays of network traffic data is solved to withstand<br />attacks on the network.<br />Objective of this paper is to build an ensemble of classifiers that surpasses single classifiers in terms of accuracy.<br />Method. To achieve the formulated goal an algorithm, that indicates the probability of belonging to certain classes, which return a<br />vector of classification scores for each point, is proposed. The peculiarity of the proposed approach is that for each point from the dataset,<br />the predicted class label corresponds to the maximum value among all scores obtained by classification methods for a given point. As<br />classifiers, decision trees, k-nearest neighbors algorithm, support vector machines with various kernel functions, and naпve Bayes are<br />considered. A comparative analysis of the proposed approach with single classifiers is considered using the following metrics: accuracy,<br />precision, recall, and F-measure.<br />Results. The experiments have been performed in R 3.4.1 on the NSL-KDD dataset of network attacks, which was divided into three<br />classes (DoS, normal network behavior and other types of attack).<br />Conclusions. The conducted experiments have confirmed the efficiency of the proposed approach. The most accurate result showed<br />an ensemble of five classifiers. The development of techniques for attacks detection based on an ensemble of classifiers avoids the problems inherent in most approaches since it is capable of detecting both known and new attacks with high accuracy. It can be concluded that the proposed approach for network attacks detection is of practical significance. In order to further study the attacks detection in network<br />traffic, studies will be performed on real Big data sets. |
|
| ##plugins.schemas.marc.fields.260.name## |
Zaporizhzhya National Technical University 2018-10-04 12:10:39 |
|
| ##plugins.schemas.marc.fields.856.name## |
application/pdf http://ric.zntu.edu.ua/article/view/142979 |
|
| ##plugins.schemas.marc.fields.786.name## |
Radio Electronics, Computer Science, Control; No 2 (2018): Radio Electronics, Computer Science, Control |
|
| ##plugins.schemas.marc.fields.546.name## |
en |
|
| ##plugins.schemas.marc.fields.540.name## |
Copyright (c) 2018 R. M. Alguliyev, R. M. Aliguliyev, Y. N. Imamverdiyev, L. V. Sukhostat |
|