Intrusion Detection Using Cost-Sensitive Classification
Paper in proceedings, 2007

Intrusion Detection is an invaluable part of computer networks defense. An important consideration is the fact that raising false alarms carries a significantly lower cost than not detecting attacks. For this reason, we examine how cost-sensitive classification methods can be used in Intrusion Detection systems. The performance of the approach is evaluated under different experimental conditions, cost matrices and different classification models, in terms of expected cost, as well as detection and false alarm rates. We find that even under unfavourable conditions, cost-sensitive classification can improve performance significantly, if only slightly.

cost-sensitive classification

classification

intrusion detection

Author

Aikaterini Mitrokotsa

Chalmers, Computer Science and Engineering (Chalmers)

Christos Douligeris

Proceedings of the 3rd European Conference on Computer Network Defense (EC2ND 2007)

Vol. 30 35-47

Areas of Advance

Information and Communication Technology

Subject Categories

Computer and Information Science

ISBN

978-0-387-85554-7

More information

Created

10/8/2017