2024/05/20 by M. Kajiura, Kajiura, Maho, Junya Nakamura +1
Computer Science · Engineering · #Cryptography and Security (cs.CR) #Distributed #FOS: Computer and information sciences #Fault Detection and Control Systems #Machine Learning (cs.LG) #Networking and Internet Architecture (cs.NI) #Neural Networks and Applications #Parallel #and Cluster Computing (cs.DC)
paper · pdf · doi:10.48550/arxiv.2405.13066
openalex publication_date 2024/05/20 · openalex created_date 2024/05/25 · openalex updated_date 2026/07/28
Network Intrusion Detection Systems (NIDSs) detect intrusion attacks in network traffic. In particular, machine-learning-based NIDSs have attracted attention because of their high detection rates of unknown attacks. A distributed processing framework for machine-learning-based NIDSs employing a scalable distributed stream processing system has been proposed in the literature. However, its performance, when machine-learning-based classifiers are implemented has not been comprehensively evaluated. In this study, we implement five representative classifiers (Decision Tree, Random Forest, Naive Bayes, SVM, and kNN) based on this framework and evaluate their throughput and latency. By conducting the experimental measurements, we investigate the difference in the processing performance among these classifiers and the bottlenecks in the processing performance of the framework.