Network intrusion detection via machine learning

Abstract

The risk and severity of network intrusion has clearly received great attention in the last decade. Meanwhile, machine learning methods have been widely employed in the area of cybersecurity. This paper introduces the network intrusion attacks and detection systems and gives an overview of literature on various machine learning models to achieve network intrusion detection, including logistic regression, k-nearest neighbors, neural networks, random forest, decision tree, and k-means clustering. We find that as the dataset gets larger, the machine learning methods yield better performance significantly. Furthermore, we discuss the prospects mentioned in the literature and put forward some key prominent future research directions in network intrusion detection systems.