Fifth Annual Conference on Communication Networks and Services Research (CNSR '07)
Using Neuro-Fuzzy Approach to Reduce False Positive Alerts
Fredericton, New Brunswick, Canada
May 14-May 17
ISBN: 0-7695-2835-X
One of the major problems of Intrusion Detection Systems (IDS) at the present is the high rate of false alerts that the systems produce. These alerts cause problems to human analysts to repeatedly and intensively analyze the false alerts to initiate appropriate actions. We demonstrate the advantages of using a hybrid neuro-fuzzy approach to reduce the number of false alarms. The neuro-fuzzy approach was experimented with different background knowledge sets in DARPA 1999 network traffic dataset. The approach was evaluated and compared with RIPPER algorithm. The results shows that the neurofuzzy approach significantly reduces the number of false alarms more than the RIPPER algorithm and requires less background knowledge sets.
Index Terms:
Intrusion Detection, False Positive, Neuro- Fuzzy, Classification, Security
Citation:
Riyad Alshammari, Sumalee Sonamthiang, Mohsen Teimouri, Denis Riordan, "Using Neuro-Fuzzy Approach to Reduce False Positive Alerts," cnsr, pp.345-349, Fifth Annual Conference on Communication Networks and Services Research (CNSR '07), 2007