Random forests for online intrusion detection in computer networks

Abstract

This study proposes a methodology to build an Online Network Intrusion Detection System by using the Computational Intelligence technique called Random Forests and an API to preprocess the network packets. The experiments were carried out from two network traffic databases: The ISCX (i); and a test database (ii) created with the proposed API in our own network environment. The results obtained with the Random Forests technique show accuracy rates around 98%, bringing significant advances in the area of Intrusion Detection and affirming the high efficiency of the use of the technique to solve problems of intrusion detection in real network environments.