Skip to Main content Skip to Navigation
Conference papers

Efficient training data extraction framework for intrusion detection systems

Abstract : One of the most important challenges in networks of future is how to provide security services in an efficient and quick manner without questioning the conceptual model of these networks. NIDS (Network Intrusion Detection system) is an effective approach for dealing with these security issues. Their detection engines use two main approaches to inspect malicious traffic; misuse detection and anomaly detection. Machine learning approaches have been widely investigated in anomaly detection systems. However, despite multiple academic researches, such systems are rarely employed in operational settings. They suffer from long time training, lack of good quality training data and a random selection of features (training attributes). This paper aims to resolve issues of limited quantity and quality of training data sets and investigates the impact of features selection process on the classification performance. It introduces a novel framework to extract efficient real " ground-truth " training data sets from the network traffic for supervised machine learning algorithms. We support this claim by performing the evaluation of results on a Naive Bayesian classifier.
Document type :
Conference papers
Complete list of metadata

Cited literature [19 references]  Display  Hide  Download
Contributor : Abdelhamid Makiou <>
Submitted on : Wednesday, August 31, 2016 - 12:46:41 PM
Last modification on : Saturday, October 10, 2020 - 3:36:01 AM
Long-term archiving on: : Friday, December 2, 2016 - 12:32:57 AM


Files produced by the author(s)




Abdelhamid Makiou, Ahmed Serhrouchni. Efficient training data extraction framework for intrusion detection systems. Network of the Future , Sep 2015, Montréal, Canada. ⟨10.1109/NOF.2015.7333298⟩. ⟨hal-01358229⟩



Record views


Files downloads