An investigation of the hoeffding adaptive tree for the problem of network intrusion detection
Diego Guarnieri Correa, Fabrício Enembreck, Carlos Nascimento Silla Junior · 2017
Intrusion detection in computer networks is a important topic in information security. Due to numerous cases of security breaches that caused economic and social losses in recent years, this topic has been the subject of several studies in order to mitigate problems related to network intrusion and computer attacks. Information security systems have been using different techniques for network intrusion detection. However, with the development of communication mechanisms and consequently with the increase in data traffic, some techniques used for intrusion detection lost their information processing capability. The emergence of new forms of attacks on computer systems also contribute to the depreciation of some of the existing tools. In this scenario, new techniques capable of processing large amounts of information and that perform proactive discovery of new attack vectors are necessary. This paper presents a study on the use of a data stream mining technique known as Hoeffding Adaptive Tree to create a predictive model for network intrusion detection. The experiments performed in this work show the effectiveness of this technique when applied to a database of computer network attacks.