A controversial study on Random Forest Accuracy for Attack Detection - Réseaux, Informatique, Systèmes de Confiance Accéder directement au contenu
Communication Dans Un Congrès Année : 2023

A controversial study on Random Forest Accuracy for Attack Detection

Résumé

Machine learning based anomaly and attack detection is a topic under the spotlights for more than one decade. It is raising a significant research effort worldwide. The reasons of this interest lie in the ability of machine learning to introduce a large part of autonomy in the attacks detection process compared to the classical signature based approach, and then reduces the management cost of networks for NetOps, provides rapid and efficient results, and is prone to detect 0d attacks. This paper confirms this efficiency showing that using the simple Random Forest (RF) algorithms together with features selection allows detection ratio greater than 99%. However, despite a large set of attempts on the training stage for improving this detection ratio, RF never detects 100% of attacks. It especially always misses some attacks in the traffic, especially under-represented ones in the training dataset. False Negatives are certainly the most dramatic events for network security. In addition, it makes adversarial learning very easy to perform. This paper then presents a controversial study on machine learning based attack detection (using the significantly illustrative RF example), and its trustworthiness limits. This paper is then trying to break the current dogma that machine learning is THE solution for future cyber-security systems.
Fichier principal
Vignette du fichier
Vacher_Owe_FTC2023.pdf (1.48 Mo) Télécharger le fichier
Origine : Fichiers produits par l'(les) auteur(s)

Dates et versions

hal-04089074 , version 1 (04-05-2023)

Identifiants

  • HAL Id : hal-04089074 , version 1

Citer

Quentin Vacher, Philippe Owezarski. A controversial study on Random Forest Accuracy for Attack Detection. Future Technology Conference, Science and Information organization (SAI), Nov 2023, San Francisco (CA, USA), United States. ⟨hal-04089074⟩
40 Consultations
42 Téléchargements

Partager

Gmail Facebook X LinkedIn More