Enhanced Machine Learning-Based Intrusion Detection System for Zero-Day Attacks
Abstract
The recent rise in complex cyber-attacks has led to the need for intrusion detection systems that can detect both known and previously unseen attacks in network traffic with minimal false positives. This paper presents Enhanced Machine Learning Based Intrusion Detection System for Zero-Day Network Attacks as a solution to the problem of zero-day attack detection with minimal false positives. The proposed model uses a hybrid detection architecture that comprises of Signature-Based Detection, Random Forest classifier, Confidence Gate, and MiniBatch K-Means clustering to detect both known and zero-day attacks respectively. The intrusion detection system was designed and implemented using Python and CICIDS2017 dataset was used for training and evaluating the proposed models. The experimental results showed that Random Forest attained an accuracy of 99.59 % with a precision of 99.58%, a recall of 99.59%, and an F1-score of 99.58%. On the other hand, MiniBatch K-Means attained a Silhouette Score of 0.8989%. This demonstrated that that signature-based detection rules coupled with supervised and unsupervised machine learning algorithms could effectively detect known attacks and suspicious activities. The prototype was able to monitor live network traffic and present dashboards with visualizations of security- related events.
Keywords
References
More Articles from INTERNATIONAL JOURNAL OF COMPUTER SCIENCE AND MATHEMATICAL THEORY
Author: Ghaliya AlFarsi
Author: Ahmed Samaila1, Etemi. J. Garba2, and Oluborode Kayode O., Corresponding author
Author: Yunusa, Samson PhD, Etuk Emmanuel Dan, Micah Michael, and Ismail Uzairu Usman
Author: Duke, Tamunotonye Juliana, Sako, D.J.S., Bennett, E.O.
Author: Joshua Kolapo Awe,, Samson Afolabi Arekete, Olufade Falade Williams Onifade, Olufunmilayo Olopade,, Benjamin Segun Aribisala
