Intrusion Detection Using Hybrid Enhanced CSA-PSO and Multivariate WLS Random-forest technique

• Published in: IEEE eTransactions on network and service management 2023-12, Vol.20 (4), p.1-1
• Main Authors: Mohi-ud-din, Ghulam, Zhiqiang, Liu, Jiangbin, Zheng, Sifei, Wang, Zhijun, Lin, Asim, Muhammad, Zhong, Yuxuan, Chen, Yuxin
• Format: Article
• Language: English
• Subjects: Algorithms; Asymptotic methods; Asymptotic properties; Classification; Classification algorithms; Classification tree analysis; Classifiers; CSA-PSO; Data communication; Datasets; Feature extraction; Intrusion detection; Intrusion Detection System; Intrusion detection systems; Metaheuristics; Particle swarm optimization; Performance assessment; Prediction algorithms; Random Forest; Search algorithms; Search methods; Training; Weighted Least Mean Square; Wireless Sensor Network
• ISSN: 1932-4537; 1932-4537
• DOI: 10.1109/TNSM.2023.3258901

The exponential growth in data communication and increase in network size have led to various intrusions and attacks. An Intrusion Detection System (IDS) can be provided as a crucial component of a network or database to ensure the security of data communication over a network. The network size is large, a large dataset may comprise more irrelevant, redundant, and high-dimensional features that impact feature classification, thus affecting the intrusion detection rate. This study presents a new hybrid enhanced normalised Crow Search Algorithm (CSA) and Particle Swarm Optimisation (PSO) technique to address feature selection issues and to classify global best features using a random-forest classifier. In the proposed algorithm, the benefits of the CSA between the search strategy and rapid convergence phenomenon of the PSO algorithm are utilised to select the global best solution in a large search space. A randomforest classifier is used to classify the features after they are updated with weight values for significant features, assessing the asymptotic variance of features and points that are closest to the optimal solution. The asymptotic features are subjected to the weighted least mean square (WLS) method to eliminate large deviations among the features. The random-forest classifier distinguishes between normal records and abnormal intrusion records. The performance assessment of the proposed hybrid IDS model is performed by utilising two datasets, which reveals that the proposed model outperforms other existing models. The simulation outcomes show higher accuracy rate, precision value, recall factor, and F1-Score, revealing the efficacy of the IDS model.