Artificial intelligence approaches for intrusion detection

Dima Novikov, Rochester Institute of Technology
Roman V. Yampolskiy, University at Buffalo, The State University of New York
Leon Reznik, Rochester Institute of Technology

Abstract

Recent research indicates a lot of attempts to create an Intrusion Detection System that is capable of learning and recognizing attacks it faces for the first time. Benchmark datasets were created by the MIT Lincoln Lab and by the International Knowledge Discovery and Data Mining group (KDD). A number of competitions were held and many systems developed as a result. The overall preference was given to Expert Systems that were based on Decision Making Tree algorithms. This paper explores Neural Networks as means of Intrusion Detection. After multiple techniques and methodologies are investigated, we show that properly trained Neural Networks are capable of fast recognition and classification of different attacks at the level superior to previous approaches. © 2006 IEEE.