Towards a Standard Feature Set for Network Intrusion Detection System Datasets
AI-generated Key Points
- Network Intrusion Detection Systems (NIDSs) are crucial for protecting computer networks against cyber attacks
- Machine Learning (ML)-based NIDSs require high-quality datasets for training and evaluation
- Lack of a standard feature set in publicly available datasets makes it challenging to compare the performance of ML-based traffic classifiers on different datasets and evaluate their ability to generalize across various network scenarios
- Researchers proposed and evaluated standard NIDS feature sets based on the NetFlow network meta-data collection protocol and system
- The study compared two NetFlow-based feature set variants: one with 12 features and another with 43 features
- Four widely used NIDS datasets were analyzed: UNSW-NB15, ToN-IoT, BoT-IoT, and CSE-CIC-IDS2018
- Most features were exclusive to individual datasets, making it difficult to evaluate proposed ML models using a targeted feature set across all four datasets
- The ratio of benign-to-attack flows varied significantly in each dataset, with some mainly consisting of attack samples that do not represent realistic network behavior
- Proposed NetFlow-based feature sets can help overcome these challenges by providing a standardized set of features for evaluating ML-based NIDS models across different datasets
- Standardizing feature sets in NIDS datasets can facilitate accurate evaluation and comparison of ML-based traffic classifiers while reducing false positives and negatives.
Authors: Mohanad Sarhan, Siamak Layeghy, Marius Portmann
Abstract: Network Intrusion Detection Systems (NIDSs) are important tools for the protection of computer networks against increasingly frequent and sophisticated cyber attacks. Recently, a lot of research effort has been dedicated to the development of Machine Learning (ML) based NIDSs. As in any ML-based application, the availability of high-quality datasets is critical for the training and evaluation of ML-based NIDS. One of the key problems with the currently available datasets is the lack of a standard feature set. The use of a unique and proprietary set of features for each of the publicly available datasets makes it virtually impossible to compare the performance of ML-based traffic classifiers on different datasets, and hence to evaluate the ability of these systems to generalise across different network scenarios. To address that limitation, this paper proposes and evaluates standard NIDS feature sets based on the NetFlow network meta-data collection protocol and system. We evaluate and compare two NetFlow-based feature set variants, a version with 12 features, and another one with 43 features.
Ask questions about this paper to our AI assistant
You can also chat with multiple papers at once here.
Welcome to our AI assistant! Here are some important things to keep in mind:
- The assistant will only answer questions related to this specific paper.
- Please note that this is not a bot for casual chatting.
- If you want the answer in a language other than the language you chose for navigating the website, simply add "TRANSLATE IN LANGUAGE L" at the end of your query (replace "LANGUAGE L" with the language of your choice).
- For example, you could ask "Can you extract the most important aspect of the paper? TRANSLATE IN SPANISH".
- If you want to keep the history of your questions/answers you should create an account.
Assess the quality of the AI-generated content by voting
Why do we need votes?
Votes are used to determine whether we need to re-run our summarizing tools. If the count reaches -10, our tools can be restarted.
Similar papers summarized with our AI tools
Navigate through even more similar papers through atree representation
Look for similar papers (in beta version)
By clicking on the button above, our algorithm will scan all papers in our database to find the closest based on the contents of the full papers and not just on metadata. Please note that it only works for papers that we have generated summaries for and you can rerun it from time to time to get a more accurate result while our database grows.
Disclaimer: The AI-based summarization tool and virtual assistant provided on this website may not always provide accurate and complete summaries or responses. We encourage you to carefully review and evaluate the generated content to ensure its quality and relevance to your needs.