Open Access

Detecting Network Intrusions Using Signal Processing with Query-Based Sampling Filter

EURASIP Journal on Advances in Signal Processing20082009:735283

https://doi.org/10.1155/2009/735283

Received: 2 September 2007

Accepted: 16 September 2008

Published: 12 October 2008

Abstract

This paper presents a novel approach for training a network intrusion detection system based on a query-based sampling (QBS) filter. The proposed QBS filter applies the concepts of data quantization to signal processing in order to develop a novel classification system. Through interaction with a partially trained classifier, the QBS filter can use an oracle to produce high-quality training data. We tested the method with a benchmark intrusion dataset to verify its performance and effectiveness. Results show that selecting qualified training data will have an impact not only on the performance but also on overall execution (to reduce distortion). This method can significantly increase the accuracy of the detection rate for suspicious activity and can recognize rare attacks. Additionally, the method can improve the efficiency of real-time intrusion detection models.

Publisher note

To access the full article, please see PDF.

Authors’ Affiliations

(1)
Department of Engineering Science and Ocean Engineering, National Taiwan University

Copyright

© Liang-Bin Lai et al. 2009

This article is published under license to BioMed Central Ltd. This is an open access article distributed under the Creative Commons Attribution License, which permits unrestricted use, distribution, and reproduction in any medium, provided the original work is properly cited.