In network intrusion detection research, two characteristics are generally considered vital to build efficient intrusion detection systems (IDSs) namely, optimal feature selection technique and robust classification schemes. However, an emergence of sophisticated network attacks and the advent of big data concepts in anomaly detection domain require the need to address two more significant aspects. They are concerned with employing appropriate big data computing framework and utilizing contemporary dataset to deal with ongoing advancements. Based on this need, we present a comprehensive approach to build an efficient IDS with the aim to strengthen academic anomaly detection research in real-world operational environments. The proposed system is a representative of the following four characteristics: It (i) performs optimal feature selection using branch-and-bound algorithm; (ii) employs logistic regression for classification; (iii) introduces bulk synchronous parallel processing to handle computational requirements of large-scale networks; and (iv) utilizes real-time contemporary dataset named ISCX-UNB to validate its efficacy.

Authors and Affiliations

1. Dongguk University, Seoul, Republic of Korea

   Kamran Siddique & Yangwoo Kim

2. INRS-EMT, University of Quebec, Quebec City, Canada

   Zahid Akhtar

Corresponding author

Correspondence toYangwoo Kim.

Editors and Affiliations

1. Department of Computer Science and Engineering, Seoul University of Science and Technology, Seoul, Korea (Republic of)

   James J. Park

2. Department of Business Science, University of Salerno, Salerno, Italy

   Vincenzo Loia

3. Department of Multimedia Engineering, Dongguk University, Seoul, Soul-t’ukpyolsi, Korea (Republic of)

   Gangman Yi

4. Department of Multimedia Engineering, Dongguk University, Seoul, Soul-t’ukpyolsi, Korea (Republic of)

   Yunsick Sung

Reprints and permissions

© 2018 Springer Nature Singapore Pte Ltd.

Policies and ethics