Enhancing Hybrid Intrusion Detection and Prevention System for Flooding Attacks Using Decision Tree

Abstract

Computer networks are being attacked every day. Intrusion detection systems (IDS) are used to detect and reduce effects of these attacks. The currently used of hybrid intrusion detection systems that was base on signature and anomaly based detection techniques were became inefficient for detecting attacks because it have nearly less than or equal to 95.5% for the detection rate and 1.8% for false positive rate, nowadays these values are unsatisfied for the detection so that the needs to enhanced hybrid intrusion detection system has became the most important issues. In this study, the enhanced hybrid intrusion detection system has been proposed to provide better results with high accuracy of the detection rate and reduce the value of false positive rate that will done by proposing new method based on decision tree of data mining techniques that is based on C4.5 algorithm to show that the proposed model is more efficient and it gives better optimum results.