Machine learning for intrusion detection in mobile tactical networks

Ken F. Yu; Richard E. Harang; Kerry N. Wood

doi:10.1117/12.2261683

1 May 2017 Machine learning for intrusion detection in mobile tactical networks

Ken F. Yu, Richard E. Harang, Kerry N. Wood

Proceedings Volume 10185, Cyber Sensing 2017; 1018504 (2017) https://doi.org/10.1117/12.2261683
Event: SPIE Defense + Security, 2017, Anaheim, CA, United States

Abstract

Previous work has demonstrated that machine learning-based network intrusion detection systems (IDS) can be constructed to provide a significant proportion of the accuracy of a conventional signature-based IDS while using a fraction of the resources. Such systems are ideally suited to mobile tactical networks, which typically require much denser sensor coverage to ensure complete network protection and have relatively limited size, weight, and power budgets within which to both protect and operate the network. In this study, we extend previous work on the Extremely Lightweight Intrusion Detection system (ELIDe) and examine its ability to both store a wide range of signatures and generalize to new data. We also demonstrate the following: (1) ELIDe weight vectors are capable of storing multiple signatures while not significantly affecting the false-positive rate; (2) such weight vectors can detect packets that match the signatures on which they were trained with a high degree of accuracy (low false-negative rate); and (3), in addition to approximating the output of a conventional set of signatures, ELIDe weight vectors can also weakly generalize to novel malicious traffic. We show that, despite the significant challenges mobile tactical networks pose for intrusion detection, the use of machine learning allows the deployment of approximate signaturebased intrusion detection in such networks.

Conference Presentation

Citation Download Citation

Ken F. Yu, Richard E. Harang, and Kerry N. Wood "Machine learning for intrusion detection in mobile tactical networks", Proc. SPIE 10185, Cyber Sensing 2017, 1018504 (1 May 2017); https://doi.org/10.1117/12.2261683

ACCESS THE FULL ARTICLE

INSTITUTIONAL
Select your institution to access the SPIE Digital Library.

SELECT YOUR INSTITUTION

PERSONAL
Sign in with your SPIE account to access your personal subscriptions or to use specific features such as save to my library, sign up for alerts, save searches, etc.

PERSONAL SIGN IN

No SPIE Account? Create one

PURCHASE THIS CONTENT

SUBSCRIBE TO DIGITAL LIBRARY

50 downloads per 1-year subscription

Members: $195

Non-members: $335 ADD TO CART

25 downloads per 1 - year subscription

Members: $145

Non-members: $250 ADD TO CART

PURCHASE SINGLE ARTICLE

Includes PDF, HTML & Video, when available