Improving the speed of the intrusion detection system performance by reducing the data volume using kernel-based DBSCAN

Document Type : Original Article

Authors

1 Associate Professor, Yazd University, Yazd, Iran

2 Master's degree, Yazd University, Yazd, Iran

3 Assistant Professor, Yazd University, Yazd, Iran

Abstract

The Internet of Things (IoT) is a rapidly evolving technology that connects physical devices through networked systems. However, as IoT continues to expand, it poses various security challenges that require appropriate solutions to protect sensitive information and user privacy. This paper focuses on improving the speed of intrusion detection systems (IDS) as a critical solution for IoT security. In IDS, the large volume of data can slow down the learning process. In this paper, the DBSCAN clustering algorithm is modified by adding a minimum neighborhood parameter to reduce data samples in a targeted manner, aiming to enhance the speed of IDS and reduce learning time and costs. The parameters of the modified DBSCAN are tuned using a genetic algorithm. Experimental results on the Kaggle and NSL_KDD datasets demonstrate that the proposed model can maintain classification accuracy above 96% for the Kaggle dataset and above 92.51% for the NSL_KDD dataset, even with up to an 80% reduction in data volume. Additionally, computation time for the Kaggle dataset decreased from 458.09 ms to 47.21 ms, and for the NSL_KDD dataset from 995.2 ms to 223.60 ms. Thus, despite improvements in speed and reductions in time and cost, the model's optimal performance is maintained.

Keywords

Main Subjects


Smiley face

 

  • Receive Date: 05 October 2024
  • Revise Date: 12 December 2024
  • Accept Date: 12 January 2025
  • Publish Date: 01 February 2025