HIDS-DT: An Effective Hybrid Intrusion Detection System Based on Decision Tree

Author

Yang, Jie ; Chen, Xin ; Xiang, Xudong ; Wan, Jianxiong

Author_Institution

Dept. of Inf. Security, Beijing Inf. Sci. & Technol. Univ., Beijing, China

Volume

1

fYear

2010

fDate

12-14 April 2010

Firstpage

70

Lastpage

75

Abstract

A hybrid intrusion detection approach combing both misuse detection and anomaly detection can detect newly discovered attacks while maintaining a relatively high detection rate. This paper presents a novel hybrid intrusion detection system based on protocol analysis and decision tree algorithms. Performance evaluation of the proposed system is conducted using Generalized Stochastic Petri Nets (GSPN). Simulation results show that this hybrid system can reach a high detection rate.

Keywords

Petri nets; decision trees; security of data; HIDS-DT; anomaly detection; decision tree algorithms; generalized stochastic Petri nets; hybrid intrusion detection system; misuse detection; performance evaluation; protocol analysis; Computer networks; Decision trees; Intrusion detection; Mobile communication; Pattern matching; Petri nets; Space technology; Stochastic systems; TCPIP; Transport protocols; Decision Tree; Generalized Stochastic Petri Net; Hybrid Intrusion Detection Model; Protocol Analysis;

fLanguage

English

Publisher

ieee

Conference_Titel

Communications and Mobile Computing (CMC), 2010 International Conference on

Conference_Location

Shenzhen

Print_ISBN

978-1-4244-6327-5

Electronic_ISBN

978-1-4244-6328-2

Type

conf

DOI

10.1109/CMC.2010.73

Filename

5471511