Intrusion Detection Using Cost-Sensitive Classification
Paper i proceeding, 2007

Intrusion Detection is an invaluable part of computer networks defense. An important consideration is the fact that raising false alarms carries a significantly lower cost than not detecting attacks. For this reason, we examine how cost-sensitive classification methods can be used in Intrusion Detection systems. The performance of the approach is evaluated under different experimental conditions, cost matrices and different classification models, in terms of expected cost, as well as detection and false alarm rates. We find that even under unfavourable conditions, cost-sensitive classification can improve performance significantly, if only slightly.

cost-sensitive classification

classification

intrusion detection

Författare

Aikaterini Mitrokotsa

Chalmers, Data- och informationsteknik

Christos Douligeris

Proceedings of the 3rd European Conference on Computer Network Defense (EC2ND 2007)

Vol. 30 35-47

Styrkeområden

Informations- och kommunikationsteknik

Ämneskategorier

Data- och informationsvetenskap

ISBN

978-0-387-85554-7

Mer information

Skapat

2017-10-08