Convergence Optimization of Backpropagation Artificial Neural Network Used for Dichotomous Classification of Intrusion Detection Dataset

artificial neural network, backpropagation, data mining, intrusion detection

There are distinguished two categories of intrusion detection approaches utilizing machine learning according to type of input data. The first one represents network intrusion detection techniques which consider only data captured in network traffic. The second one represents general intrusion detection techniques which intake all possible data sources including host-based features as well as network-based ones. The paper demonstrates various convergence optimization experiments of a
backpropagation artificial neural network using well know NSL-KDD 1999 dataset, and thus, representing the general intrusion detection. Experiments evaluating usefulness of stratified sampling on input dataset and simulated annealing employed into the backpropagation learning algorithm are performed. Both techniques provide improvement of backpropagation's learning convergence as well as classification accuracy. After 50 training cycles, classification accuracy of 84.20% is achieved when utilizing stratified sampling and accuracy of 86.5% when both stratified sampling and simulated annealing are used. In contrast, the backpropagation by itself reaches only 76.63% accuracy. Comparing to state-of-the-art work introducing the NSL-KDD dataset, there is achieved accuracy higher about 4.5%.