PROPOSED HYBRID-MULTISTAGES NIDS TECHNIQUES
Mohamed A. Mohamed · 2012
Most intrusion detection systems (IDSs) are designed of the basis of a single algorithm that is designed to either model normal behavior patterns or attack signatures in network traffic. Most often, these systems fail to provide adequate alarm capability that reduces false positive and false negative rates. We proposed multi-stages approaches to enhance the overall performance of IDSs. All models implemented in this paper, have a perfect 2-classes classifier to differentiate between attacks & normal patterns, so we grant to detect attacks at first stage of IDS and secure the protected system, through other stages we tried to identify the name of intrusion to increase the efficiency of IDS. The first stage is highly capable in detecting normal signature and diverse what-else to attacks category, so it is capable in detecting unseen or unknown attacks. The results of the proposed techniques had shown that a very high improvement in the performance of IDSs. The practical results showed that multistages system composed of multilayer perceptron (MLP) and improved hybrid J48-DT provided the best results among all presented systems.