An ensemble clustering method for intrusion detection

Abstract

The amount of data in the field of computer networking is growing rapidly and this urges new challenges in the field of an intrusion detection system (IDS). To handle such increasing volume of data, a new hybrid approach has to be developed to overcome the problems such as high detection rate and low false alarm rate. An intrusion detection system plays a vital role in the detection of malicious attacks. Data mining and machine learning techniques are important and play a vital role in the detection of attacks. This paper mainly focuses on detection rate and false alarm rate and so to resolve these problems a hybrid method, ensemble clustering, has been proposed. This method tries to increase detection rate with lowering false alarm rate. The method has been tested on KDDCup'99 network intrusion dataset and performs well as compared with other algorithms in terms of detection rate and false alarm rate.