MIND: A Multi-Source Data Fusion Scheme for Intrusion Detection in Networks.

Journal: Sensors (Basel, Switzerland)
Published Date:

Abstract

In recent years, there is an exponential explosion of data generation, collection, and processing in computer networks. With this expansion of data, network attacks have also become a congenital problem in complex networks. The resource utilization, complexity, and false alarm rates are major challenges in current Network Intrusion Detection Systems (NIDS). The data fusion technique is an emerging technology that merges data from multiple sources to form more certain, precise, informative, and accurate data. Moreover, most of the earlier intrusion detection models suffer from overfitting problems and lack optimal detection of intrusions. In this paper, we propose a multi-source data fusion scheme for intrusion detection in networks () , where data fusion is performed by the horizontal emergence of two datasets. For this purpose, the Hadoop MapReduce tool such as, Hive is used. In addition, a machine learning ensemble classifier is used for the fused dataset with fewer parameters. Finally, the proposed model is evaluated with a 10-fold-cross validation technique. The experiments show that the average , , , , and are , , , , and respectively. Moreover, the results indicate that the proposed model is significantly effective in intrusion detection compared to other state-of-the-art methods.

Authors

  • Naveed Anjum
    Department of Computing, Riphah International University, Faisalabad 38000, Pakistan.
  • Zohaib Latif
    Department of Computer Science, Hanyang University, Seoul 04763, Korea.
  • Choonhwa Lee
    Department of Computer Science, Hanyang University, Seoul 04763, Korea.
  • Ijaz Ali Shoukat
    Department of Computing, Riphah International University, Faisalabad 38000, Pakistan.
  • Umer Iqbal
    Department of Computing, Riphah International University, Faisalabad 38000, Pakistan.