[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"doc-detail-125134-en":3,"doc-seo-125134-105":30,"detail-sidebar-cat-0-en-105":91},{"code":4,"msg":5,"data":6},0,"success",{"doc_id":7,"user_id":8,"nickname":9,"user_avatar":10,"doc_module":4,"category_id":11,"category_name":12,"doc_title":13,"doc_description":14,"doc_content":15,"file_id":16,"file_url":17,"file_type":18,"file_size":19,"view_count":20,"is_deleted":4,"is_public":20,"is_downloadable":20,"audit_status":20,"page_count":21,"language":22,"language_code":23,"site_id":24,"html_lang":23,"table_of_contents":25,"faqs":26,"seo_title":27,"seo_description":14,"update_tm":28,"read_time":29},125134,7971461740909,"Levi","https://ap-avatar.wpscdn.com/davatar_155a257f0dc6eb9ab79c44ca47cae57d",8,"Research & Report","Machine learning-based intrusion detection system for detecting web attacks - Research report","Machine learning intrusion detection systems are presented to address limitations of signature-based firewalls against advanced and unknown attacks. The study analyzes multiple machine learning classifiers for anomalous network behavior using the CIC-IDS-2017 dataset, which contains both historical and current attacks. Models including decision tree, random forest, logistic regression, Gaussian naïve Bayes, adaptive boosting, and ensemble variants are assessed. Performance is measured with accuracy, precision, recall, F1-score, false positive rate, ROC curve, and calibration curve.","Machine learning-based intrusion detection system for detecting web attacks  \nFatimetou Abdou Vadhil, Mohamed Lemine Salihi, Mohamedade Farouk Nanne  \nDepartment of Mathematics and Computer Science, Faculty of Sciences and Technics, University of Nouakchott,  \nNouakchott, Mauritania  \n\n| Article history:\u003Cbr>Received Mar 20, 2023 Revised Sep 11, 2023 Accepted Sep 16, 2023 | The increasing use of smart devices results in a huge amount of data, which raises concerns about personal data, including health data and financial data. This data circulates on the network and can encounter network traffic at anytime. This traffic can either be normal traffic or an intrusion created by hackers with the aim of injecting abnormal traffic into the network. Firewalls and traditional intrusion detection systems detect attacks based on signature patterns. However, this is not sufficient to detect advanced or unknown attacks. To detect different types of unknown attacks, the use of intelligent techniques is essential. In this paper, we analyse some machine learning techniques proposed in recent years. In this study, several classifications were made to detect anomalous behaviour in network traffic. The models were built and evaluated based on the Canadian Institute for Cybersecurity-intrusion detection systems dataset released in 2017 (CIC-IDS-2017), which includes both current and historical attacks. The experiments were conducted using decision tree, random forest, logistic regression, gaussian naïve bayes, adaptive boosting, and their ensemble approach. The models were evaluated using various evaluation metrics such as accuracy, precision, recall, F1-score, false positive rate, receiver operating characteristic curve, and calibration curve.\u003Cbr>This is an open access article under the CC BY-SA license.\u003Cbr> |\n| --- | --- |\n| Keywords:\u003Cbr>CIC-IDS-2017\u003Cbr>Cybersecurity\u003Cbr>Intrusion detection systems Machine learning Web attacks |  |\n\nCorresponding Author:  \nFatimetou Abdou Vadhil  \nDepartment of Mathematics and Computer Science, Faculty of Sciences and Technics University of Nouakchott  \nNouakchott, Mauritania  \nEmail: [fatiab38@gmail.com](fatiab38@gmail.com)  \nArticle Info ABSTRACT  \n1. INTRODUCTION  \nRecent technologies such as artificial intelligence, big data, and internet of things. have made our lives exponentially dependent on the internet. Alongside this, however, the number of anomalous behaviours is also becoming increasingly important [1], [2]. Detecting anomalous network activity is a critical cybersecurity task that is becoming more and more of a focus, especially as we rely more and more on computers and smartphones in recent years [3]–[5]. Due to the global pandemic, we can say that our daily lives are shifting to the internet, which makes security issues more complicated than before. To detect abnormal activities in a computer or network, there is a special security device called network intrusion detection system (NIDS) [6], [7] .  \nIntrusion detection systems (IDS) are security tools that aim to defend a system, perform countermeasures or generate alerts for a facility to take appropriate action when an attack occurs [8] . An IDS may be a software or hardware system designed to detect malicious actions on computer systems to enable the maintenance of system security [9] . The main purpose of IDS is to detect various types of abnormal network traffic that cannot be detected by a simple traditional firewall [10] . This is critical to achieve solid protection against malicious acts that compromise the availability, integrity or confidentiality of computer  \nsystems [11], [12] . These systems can also be targeted at different areas. Some IDS play an extended firewall role and detect attacks as they enter the network, others monitor the network internally to intercept intruders or even collect network-wide information for central analysis. Most of these systems have a similar structure and set of components. There are two main types o","cbCailA4IQUrwitF","https://ap.wps.com/l/cbCailA4IQUrwitF","pdf",485790,1,11,"English","en",105,"# Article Info\n## Introduction\n## Background and IDS Concepts\n## Machine Learning Approaches for Intrusion Detection\n## Methods and Models\n## Evaluation Metrics","[{\"question\":\"Why do traditional firewalls and signature-based intrusion detection systems fall short?\",\"answer\":\"They rely on known signature patterns, which is not sufficient to identify advanced or previously unknown attacks. Intelligent techniques are needed to detect such unknown behaviors.\"},{\"question\":\"Which dataset is used to build and evaluate the intrusion detection models?\",\"answer\":\"The models are trained and evaluated using the Canadian Institute for Cybersecurity intrusion detection dataset released in 2017, CIC-IDS-2017, which includes current and historical attacks.\"},{\"question\":\"How are the machine learning models evaluated in the study?\",\"answer\":\"Evaluation uses metrics such as accuracy, precision, recall, F1-score, false positive rate, ROC curve, and calibration curve.\"}]","Machine learning-based intrusion detection system for detecting web attacks - Research report | PDF",1785896853,28,{"code":4,"msg":31,"data":32},"ok",{"site_id":24,"language":23,"slug":33,"title":13,"keywords":34,"description":14,"schema_data":35,"social_meta":86,"head_meta":88,"extra_data":90,"updated_unix":28},"machine-learning-based-intrusion-detection-system-for-detecting-web-attacks-research-report","",{"@graph":36,"@context":85},[37,54,68],{"@type":38,"itemListElement":39},"BreadcrumbList",[40,44,48,51],{"item":41,"name":42,"@type":43,"position":20},"https://docshare.wps.com","Home","ListItem",{"item":45,"name":46,"@type":43,"position":47},"https://docshare.wps.com/document/","Document",2,{"item":49,"name":12,"@type":43,"position":50},"https://docshare.wps.com/document/research-report/",3,{"item":52,"name":13,"@type":43,"position":53},"https://docshare.wps.com/document/machine-learning-based-intrusion-detection-system-for-detecting-web-attacks-research-report/125134/",4,{"url":52,"name":13,"@type":55,"author":56,"headline":13,"publisher":58,"fileFormat":61,"inLanguage":23,"description":14,"dateModified":62,"datePublished":62,"encodingFormat":61,"isAccessibleForFree":63,"interactionStatistic":64},"DigitalDocument",{"name":9,"@type":57},"Person",{"url":41,"name":59,"@type":60},"DocShare","Organization","application/pdf","2026-08-05",true,{"@type":65,"interactionType":66,"userInteractionCount":20},"InteractionCounter",{"@type":67},"ViewAction",{"@type":69,"mainEntity":70},"FAQPage",[71,77,81],{"name":72,"@type":73,"acceptedAnswer":74},"Why do traditional firewalls and signature-based intrusion detection systems fall short?","Question",{"text":75,"@type":76},"They rely on known signature patterns, which is not sufficient to identify advanced or previously unknown attacks. Intelligent techniques are needed to detect such unknown behaviors.","Answer",{"name":78,"@type":73,"acceptedAnswer":79},"Which dataset is used to build and evaluate the intrusion detection models?",{"text":80,"@type":76},"The models are trained and evaluated using the Canadian Institute for Cybersecurity intrusion detection dataset released in 2017, CIC-IDS-2017, which includes current and historical attacks.",{"name":82,"@type":73,"acceptedAnswer":83},"How are the machine learning models evaluated in the study?",{"text":84,"@type":76},"Evaluation uses metrics such as accuracy, precision, recall, F1-score, false positive rate, ROC curve, and calibration curve.","https://schema.org",{"og:url":52,"og:type":87,"og:title":13,"og:site_name":59,"og:description":14},"article",{"robots":89,"canonical":52},"index,follow",{"doc_id":7,"site_id":24},{"code":4,"msg":5,"data":92},[93,97,101,105,110,115,120,123,128,131,135],{"id":20,"doc_module":4,"doc_module_name":46,"category_name":94,"show_sort_weight":95,"slug":96},"Story & Novel",90,"story-novel",{"id":47,"doc_module":4,"doc_module_name":46,"category_name":98,"show_sort_weight":99,"slug":100},"Literature",80,"literature",{"id":53,"doc_module":4,"doc_module_name":46,"category_name":102,"show_sort_weight":103,"slug":104},"Exam",70,"exam",{"id":106,"doc_module":4,"doc_module_name":46,"category_name":107,"show_sort_weight":108,"slug":109},5,"Comic",60,"comic",{"id":111,"doc_module":4,"doc_module_name":46,"category_name":112,"show_sort_weight":113,"slug":114},6,"Technology",50,"technology",{"id":116,"doc_module":4,"doc_module_name":46,"category_name":117,"show_sort_weight":118,"slug":119},7,"Healthcare",40,"healthcare",{"id":11,"doc_module":4,"doc_module_name":46,"category_name":12,"show_sort_weight":121,"slug":122},30,"research-report",{"id":124,"doc_module":4,"doc_module_name":46,"category_name":125,"show_sort_weight":126,"slug":127},9,"Religion & Spirituality",20,"religion-spirituality",{"id":126,"doc_module":4,"doc_module_name":46,"category_name":129,"show_sort_weight":126,"slug":130},"World Cup","world-cup",{"id":132,"doc_module":4,"doc_module_name":46,"category_name":133,"show_sort_weight":132,"slug":134},10,"Lifestyle","lifestyle",{"id":136,"doc_module":4,"doc_module_name":46,"category_name":137,"show_sort_weight":106,"slug":138},19,"General","general"]