Random forests for online intrusion detection in computer networks

• Autor(a) principal: Scalco Neto, Heitor
• Data de Publicação: 2021
• Outros Autores: Lacerda, Wilian Soares, Françozo, Rafael Verão
• Tipo de documento: Artigo
• Idioma: eng
• Título da fonte: Repositório Institucional da UFLA
• Texto Completo: http://repositorio.ufla.br/jspui/handle/1/48677
• topic: Intrusion detection systems; Computer networks; Computational Intelligence; Random forests; Sistemas de detecção de intrusão; Redes de computadores; Inteligência computacional

This study proposes a methodology to build an Online Network Intrusion Detection System by using the Computational Intelligence technique called Random Forests and an API to preprocess the network packets. The experiments were carried out from two network traffic databases: The ISCX (i); and a test database (ii) created with the proposed API in our own network environment. The results obtained with the Random Forests technique show accuracy rates around 98%, bringing significant advances in the area of Intrusion Detection and affirming the high efficiency of the use of the technique to solve problems of intrusion detection in real network environments.