title: A hybrid approach for efficient anomaly detection using metaheuristic methods.
abstract: Network intrusion detection based on anomaly detection techniques has a significant role in protecting networks and systems against harmful activities. Different metaheuristic techniques have been used for anomaly detector generation. Yet, reported literature has not studied the use of the multi-start metaheuristic method for detector generation. This paper proposes a hybrid approach for anomaly detection in large scale datasets using detectors generated based on multi-start metaheuristic method and genetic algorithms. The proposed approach has taken some inspiration of negative selection-based detector generation. The evaluation of this approach is performed using NSL-KDD dataset which is a modified version of the widely used KDD CUP 99 dataset. The results show its effectiveness in generating a suitable number of detectors with an accuracy of 96.1% compared to other competitors of machine learning algorithms.
authors.affiliation: Department of Information Technology, Faculty of Computers and Information, Menofiya University, Shebin El Kom, Menofiya, Egypt.
authors.forename: Tamer F
authors.initials: TF
authors.lastname: Ghanem
authors.affiliation: Department of Computer Systems, Faculty of Computers and Information, Ain Shams University, Cairo, Egypt.
authors.forename: Wail S
authors.initials: WS
authors.lastname: Elkilani
authors.affiliation: Department of Information Systems, Faculty of Computers and Information, Menofiya University, Shebin El Kom, Menofiya, Egypt.
authors.forename: Hatem M
authors.initials: HM
authors.lastname: Abdul-Kader
keywords: Anomaly detection; Genetic algorithms; Intrusion detection; Multi-start methods; Negative selection algorithm