Online Naive Bayes Classification for Network Intrusion Detection

Gumus F., ŞAKAR C. O., Erdem Z., Kursun O.

IEEE/ACM International Conference on Advances in Social Networks Analysis and Mining (ASONAM), Beijing, Çin, 17 - 20 Ağustos 2014, ss.670-674 identifier identifier

  • Yayın Türü: Bildiri / Tam Metin Bildiri
  • Cilt numarası:
  • Doi Numarası: 10.1109/asonam.2014.6921657
  • Basıldığı Şehir: Beijing
  • Basıldığı Ülke: Çin
  • Sayfa Sayıları: ss.670-674
  • İstanbul Üniversitesi Adresli: Evet

Özet

Intrusion detection system (IDS) is an important component to ensure network security. In this paper we build an online Naive Bayes classifier to discriminate normal and bad (intrusion) connections on KDD 99 dataset for network intrusion detection. The classifier starts with a small number of training examples of normal and bad classes; then, as it classifies the rest of the samples one at a time, it continuously updates the mean and the standard deviations of the features (IDS variables). We present experimental results of parameter updating methods and their parameters for the online Naive Bayes classifier. The obtained results show that our proposed method performs comparably to the simple incremental update.