Intrusion detection using cost-sensitive classification
Paper in proceedings, 2009

Intrusion Detection is an invaluable part of computer networks defense. An important consideration is the fact that raising false alarms carries a significantly lower cost than not detecting attacks. For this reason, we examine how cost-sensitive classification methods can be used in Intrusion Detection systems. The performance of the approach is evaluated under different experimental conditions, cost matrices and different classification models, in terms of expected cost, as well as detection and false alarm rates. We find that even under unfavourable conditions, cost-sensitive classification can improve performance significantly, if only slightly. © Springer Science+Business Media, LLC 2009.


Aikaterini Mitrokotsa

Chalmers, Computer Science and Engineering (Chalmers), Networks and Systems (Chalmers)

Christos Dimitrakakis

Chalmers, Computer Science and Engineering (Chalmers), Computing Science (Chalmers)

C. Douligeris

Proceedings of the 3rd European Conference on Computer Network Defense, EC2ND 2007

Areas of Advance

Information and Communication Technology

Subject Categories

Computer and Information Science





More information