IDEAS home Printed from https://ideas.repec.org/a/gam/jftint/v16y2024i1p25-d1318029.html
   My bibliography  Save this article

Classification Tendency Difference Index Model for Feature Selection and Extraction in Wireless Intrusion Detection

Author

Listed:
  • Chinyang Henry Tseng

    (Department of Computer Science and Information Engineering, National Taipei University, New Taipei City 23741, Taiwan)

  • Woei-Jiunn Tsaur

    (Computer Center, National Taipei University, New Taipei City 23741, Taiwan)

  • Yueh-Mao Shen

    (College of Electrical Engineering and Computer Science, National Taipei University, New Taipei City 23741, Taiwan)

Abstract

In detecting large-scale attacks, deep neural networks (DNNs) are an effective approach based on high-quality training data samples. Feature selection and feature extraction are the primary approaches for data quality enhancement for high-accuracy intrusion detection. However, their enhancement root causes usually present weak relationships to the differences between normal and attack behaviors in the data samples. Thus, we propose a Classification Tendency Difference Index (CTDI) model for feature selection and extraction in intrusion detection. The CTDI model consists of three indexes: Classification Tendency Frequency Difference (CTFD), Classification Tendency Membership Difference (CTMD), and Classification Tendency Distance Difference (CTDD). In the dataset, each feature has many feature values (FVs). In each FV, the normal and attack samples indicate the FV classification tendency, and CTDI shows the classification tendency differences between the normal and attack samples. CTFD is the frequency difference between the normal and attack samples. By employing fuzzy C means (FCM) to establish the normal and attack clusters, CTMD is the membership difference between the clusters, and CTDD is the distance difference between the cluster centers. CTDI calculates the index score in each FV and summarizes the scores of all FVs in the feature as the feature score for each of the three indexes. CTDI adopts an Auto Encoder for feature extraction to generate new features from the dataset and calculate the three index scores for the new features. CTDI sorts the original and new features for each of the three indexes to select the best features. The selected CTDI features indicate the best classification tendency differences between normal and attack samples. The experiment results demonstrate that the CTDI features achieve better detection accuracy as classified by DNN for the Aegean WiFi Intrusion Dataset than their related works, and the detection enhancements are based on the improved classification tendency differences in the CTDI features.

Suggested Citation

  • Chinyang Henry Tseng & Woei-Jiunn Tsaur & Yueh-Mao Shen, 2024. "Classification Tendency Difference Index Model for Feature Selection and Extraction in Wireless Intrusion Detection," Future Internet, MDPI, vol. 16(1), pages 1-13, January.
  • Handle: RePEc:gam:jftint:v:16:y:2024:i:1:p:25-:d:1318029
    as

    Download full text from publisher

    File URL: https://www.mdpi.com/1999-5903/16/1/25/pdf
    Download Restriction: no

    File URL: https://www.mdpi.com/1999-5903/16/1/25/
    Download Restriction: no
    ---><---

    References listed on IDEAS

    as
    1. Mustafa Al Lail & Alejandro Garcia & Saul Olivo, 2023. "Machine Learning for Network Intrusion Detection—A Comparative Study," Future Internet, MDPI, vol. 15(7), pages 1-17, July.
    2. Reehan Ali Shah & Yuntao Qian & Dileep Kumar & Munwar Ali & Muhammad Bux Alvi, 2017. "Network Intrusion Detection through Discriminative Feature Selection by Using Sparse Logistic Regression," Future Internet, MDPI, vol. 9(4), pages 1-15, November.
    Full references (including those not matched with items on IDEAS)

    Most related items

    These are the items that most often cite the same works as this one and are cited by the same works as this one.

      Corrections

      All material on this site has been provided by the respective publishers and authors. You can help correct errors and omissions. When requesting a correction, please mention this item's handle: RePEc:gam:jftint:v:16:y:2024:i:1:p:25-:d:1318029. See general information about how to correct material in RePEc.

      If you have authored this item and are not yet registered with RePEc, we encourage you to do it here. This allows to link your profile to this item. It also allows you to accept potential citations to this item that we are uncertain about.

      If CitEc recognized a bibliographic reference but did not link an item in RePEc to it, you can help with this form .

      If you know of missing items citing this one, you can help us creating those links by adding the relevant references in the same way as above, for each refering item. If you are a registered author of this item, you may also want to check the "citations" tab in your RePEc Author Service profile, as there may be some citations waiting for confirmation.

      For technical questions regarding this item, or to correct its authors, title, abstract, bibliographic or download information, contact: MDPI Indexing Manager (email available below). General contact details of provider: https://www.mdpi.com .

      Please note that corrections may take a couple of weeks to filter through the various RePEc services.

      IDEAS is a RePEc service. RePEc uses bibliographic data supplied by the respective publishers.