|
Intrusion Detection Systems are widely used to detect cyberattacks on corporate data transmission network. Detecting new and unknown cyberattacks on CDTN is an important task of IDS. Anomaly detection methods are used to detect such cyberattacks.
The article presents a comparative analysis of machine learning methods used to detect anomalies in IDS. The purpose of this article is to systematize knowledge and formalize problems related to solving the problem of detecting anomalies in corporate data transmission networks (CDTN).
The analysis of scientific papers on IDS anomaly detection methods was carried out according to the following parameters: year of publication of the article, name of the methods, data set, dimension of the feature space, types of anomalies, detection accuracy, environment of use and brief conclusions. The studied anomaly detection methods were divided into two categories: classical machine learning methods and hybrid methods. For each category, seven scientific papers were selected for analysis. The criteria for selecting these papers were the completeness of the description of the studies, the date of publication, the authority of the journal and the number of publications by the author.
The result of the work is the systematization of existing knowledge, the formulation of problems and directions for further research of anomaly detection systems. The conclusions of the scientific article can be used for future research in this area.
Keywords:intrusion detection system, anomaly, machine learning methods, hybrid methods, data set, feature of data set, corporate data transmission networks, cyberattack
|