AdaBoost Algorithm in Trustworthy Network for Anomaly Intrusion Detection

Abstract

Boosting is an ensemble learning method that combines a set of weak learners into a strong learner to minimize training errors. AdaBoost algorithm, as a typical boosting algorithm, transforms weak learners or predictors to strong predictors in order to solve problems of classification. With remarkable usability and effectiveness, AdaBoost algorithm has been widely used in many fields, such as face recognition, speech enhancement, natural language processing, and network intrusion detection. In the large-scale enterprise network environment, more and more companies have begun to build trustworthy networks to effectively defend against hacker attacks. However, since trustworthy networks use trusted flags to verify the legitimacy of network requests, it cannot effectively identify abnormal behaviors in network data packets. This paper applies Adaboost algorithm in trustworthy network for anomaly intrusion detection to improve the defense capability against network attacks. This method uses a simple decision tree as the base weak learner, and uses AdaBoost algorithm to combine multiple weak learners into a strong learner by re-weighting the samples. This paper uses the real data of trustworthy network for experimental verification. The experimental results show that the average precision of network anomaly detection method based on AdaBoost algorithm is more than 0.999, indicating that it has a significant detection effect on abnormal network attacks and normal network access. Therefore, the proposed method can effectively improve the security of trustworthy networks.

Keywords

• trustworthy network
• zero trust
• adaboost
• anomaly intrusion detection
• intrusion detection systems
• 68m10
• 68m15