An immune-genetic algorithm with tabu local search for network intrusion detection system / Hamizan Suhaimi

Internet provides almost unlimited connection nowadays and it is widely used in our daily life such as in industrial, IoT and consumer applications. Due to the nature of borderless connection, all parties face huge challenges in providing the best quality of services especially in terms of security. Even with the existing security measure such as firewalls, Intrusion Detection System (IDS) and antivirus to defend the network, the networks are still vulnerable and its resources can be compromised by the third party. This issue highlights the need to tackle the network intrusion problem efficiently. This research aim is to study the performance of an improvised Genetic Algorithm (GA) by formulating its problem-specific algorithm for network intrusion problem. The development and implementation of the proposed technique was involved the process of modifying the standard GA so that it is good and specific enough to tackle this network intrusion problem effectively. This research was conducted based on KDD Cup 1999 dataset which contains a standard dataset with wide range of intrusions gathered from military network. The performance of the proposed method and other existing techniques (Genetic Algorithm, Artificial Immune System and Immune-Genetic Algorithm) were analysed to evaluate and determine its efficiency in terms of maximum intrusion detection rate and the highest true positive rate. At the end of the experiment, the proposed technique has achieved 98.809% and 99.639% for intrusion detection rate and true positive rate respectively. The results of this study show that the proposed method which is the combination of Genetic Algorithm, Artificial Immune System (AIS) and local search has produced the desired results. This model has the good potential to be further investigated for other research areas. It is hoped that the study can contribute to the improvement of system performance in terms of intrusion detection in computer networks.