Hybrid Intrusion Detection Model for Computer Networks


Mohammad Besharatloo1, Atiye Rahimizadeh2 and Masoud Besharatloo3, 1Okmen mechatronics and software industry trade limited company, Iran, 2Aryan university, Iran, 3Golestan university, Iran


Intrusion detection is an important research topic in network security because of increasing growth in the use of computer network services. Intrusion detection is done with the aim of detecting the unauthorized use or abuse in the networks and systems by the intruders. Therefore, the intrusion detection system is an efficient tool to control the user's access through some predefined regulations. Since, the data used in intrusion detection system has high dimension, a proper representation is required to show the basis structure of this data. Therefore, it is necessary to eliminate the redundant features to create the best representation subset. In the proposed method, a hybrid model of differential evolution and firefly algorithms was employed to choose the best subset of properties. In addition, decision tree and support vector machine (SVM) are adopted to determine the quality of the selected properties. In the first, the sorted population is divided into two sub-populations. These optimization algorithms were implemented on these subpopulations, respectively. Then, these sub-populations are merged to create next repetition population. The performance evaluation of the proposed method is done based on KDD Cup99. The simulation results show that the proposed method has better performance than the other methods in this context.


Intrusion detection system, Differential evolution,Firefly Algorithm, Support vector machine, Decision tree.

Full Text  Volume 13, Number 9