Multilevel Intrusion Detection System Based on Machine Learning Techniques.

Saved in:
Bibliographic Details
Title: Multilevel Intrusion Detection System Based on Machine Learning Techniques.
Authors: Grajales-Bustamante, J. D.1 (AUTHOR) juangrajales@itm.edu.co, Murillo-Escobar, J.2 (AUTHOR), Delgado-Trejos, Edilson3 (AUTHOR), Kendoush, Abdullah A. (AUTHOR) akendoush@augustatech.edu
Source: Journal of Engineering (2314-4912). 4/15/2026, Vol. 2026, p1-17. 17p.
Subjects: Intrusion detection systems (Computer security), Machine learning, Fuzzy clustering technique, Denial of service attacks, Support vector machines, K-nearest neighbor classification
Abstract: This paper proposes a multilevel intrusion detection system (M‐IDS) using the KDD‐Cup‐99 Dataset to detect various types of attacks on computer networks. The IDS consists of three levels and six classifiers, targeting denial of service (DoS), probing attack (PA), remote to local (R2L), and user to root (U2R) attack categories. At level 1, the first classifier identifies DoS, PA, and a class grouping R2L, U2R, and Normal. Level 2 employs three classifiers to identify attack forms corresponding to DoS, PA, R2L, U2R, and Normal. Level 3 includes two classifiers for identifying R2L and U2R attack forms. Support vector machines (SVMs), k‐nearest neighbors (k‐NNs), and semi‐supervised fuzzy c‐means (SSFCMs) classifiers were evaluated, with SVM and k‐NN performing best in levels 1 and 2, and SSFCM excelling in level 3. The proposed M‐IDS was tested using the UNSW‐NB15 Dataset, achieving errors lower than 1% in levels 1 and 2 and around 7% in level 3 for the KDD‐Cup‐99 Dataset. [ABSTRACT FROM AUTHOR]
Copyright of Journal of Engineering (2314-4912) is the property of Wiley-Blackwell and its content may not be copied or emailed to multiple sites without the copyright holder's express written permission. Additionally, content may not be used with any artificial intelligence tools or machine learning technologies. However, users may print, download, or email articles for individual use. This abstract may be abridged. No warranty is given about the accuracy of the copy. Users should refer to the original published version of the material for the full abstract. (Copyright applies to all Abstracts.)
Database: Engineering Source
Full text is not displayed to guests.
FullText Links:
  – Type: pdflink
Text:
  Availability: 1
Header DbId: egs
DbLabel: Engineering Source
An: 193058113
AccessLevel: 6
PubType: Academic Journal
PubTypeId: academicJournal
PreciseRelevancyScore: 0
IllustrationInfo
Items – Name: Title
  Label: Title
  Group: Ti
  Data: Multilevel Intrusion Detection System Based on Machine Learning Techniques.
– Name: Author
  Label: Authors
  Group: Au
  Data: <searchLink fieldCode="AR" term="%22Grajales-Bustamante%2C+J%2E+D%2E%22">Grajales-Bustamante, J. D.</searchLink><relatesTo>1</relatesTo> (AUTHOR)<i> juangrajales@itm.edu.co</i><br /><searchLink fieldCode="AR" term="%22Murillo-Escobar%2C+J%2E%22">Murillo-Escobar, J.</searchLink><relatesTo>2</relatesTo> (AUTHOR)<br /><searchLink fieldCode="AR" term="%22Delgado-Trejos%2C+Edilson%22">Delgado-Trejos, Edilson</searchLink><relatesTo>3</relatesTo> (AUTHOR)<br /><searchLink fieldCode="AR" term="%22Kendoush%2C+Abdullah+A%2E%22">Kendoush, Abdullah A.</searchLink> (AUTHOR)<i> akendoush@augustatech.edu</i>
– Name: TitleSource
  Label: Source
  Group: Src
  Data: <searchLink fieldCode="JN" term="%22Journal+of+Engineering+%282314-4912%29%22">Journal of Engineering (2314-4912)</searchLink>. 4/15/2026, Vol. 2026, p1-17. 17p.
– Name: Subject
  Label: Subjects
  Group: Su
  Data: <searchLink fieldCode="DE" term="%22Intrusion+detection+systems+%28Computer+security%29%22">Intrusion detection systems (Computer security)</searchLink><br /><searchLink fieldCode="DE" term="%22Machine+learning%22">Machine learning</searchLink><br /><searchLink fieldCode="DE" term="%22Fuzzy+clustering+technique%22">Fuzzy clustering technique</searchLink><br /><searchLink fieldCode="DE" term="%22Denial+of+service+attacks%22">Denial of service attacks</searchLink><br /><searchLink fieldCode="DE" term="%22Support+vector+machines%22">Support vector machines</searchLink><br /><searchLink fieldCode="DE" term="%22K-nearest+neighbor+classification%22">K-nearest neighbor classification</searchLink>
– Name: Abstract
  Label: Abstract
  Group: Ab
  Data: This paper proposes a multilevel intrusion detection system (M‐IDS) using the KDD‐Cup‐99 Dataset to detect various types of attacks on computer networks. The IDS consists of three levels and six classifiers, targeting denial of service (DoS), probing attack (PA), remote to local (R2L), and user to root (U2R) attack categories. At level 1, the first classifier identifies DoS, PA, and a class grouping R2L, U2R, and Normal. Level 2 employs three classifiers to identify attack forms corresponding to DoS, PA, R2L, U2R, and Normal. Level 3 includes two classifiers for identifying R2L and U2R attack forms. Support vector machines (SVMs), k‐nearest neighbors (k‐NNs), and semi‐supervised fuzzy c‐means (SSFCMs) classifiers were evaluated, with SVM and k‐NN performing best in levels 1 and 2, and SSFCM excelling in level 3. The proposed M‐IDS was tested using the UNSW‐NB15 Dataset, achieving errors lower than 1% in levels 1 and 2 and around 7% in level 3 for the KDD‐Cup‐99 Dataset. [ABSTRACT FROM AUTHOR]
– Name: AbstractSuppliedCopyright
  Label:
  Group: Ab
  Data: <i>Copyright of Journal of Engineering (2314-4912) is the property of Wiley-Blackwell and its content may not be copied or emailed to multiple sites without the copyright holder's express written permission. Additionally, content may not be used with any artificial intelligence tools or machine learning technologies. However, users may print, download, or email articles for individual use. This abstract may be abridged. No warranty is given about the accuracy of the copy. Users should refer to the original published version of the material for the full abstract.</i> (Copyright applies to all Abstracts.)
PLink https://search.ebscohost.com/login.aspx?direct=true&site=eds-live&db=egs&AN=193058113
RecordInfo BibRecord:
  BibEntity:
    Identifiers:
      – Type: doi
        Value: 10.1155/je/7142912
    Languages:
      – Code: eng
        Text: English
    PhysicalDescription:
      Pagination:
        PageCount: 17
        StartPage: 1
    Subjects:
      – SubjectFull: Intrusion detection systems (Computer security)
        Type: general
      – SubjectFull: Machine learning
        Type: general
      – SubjectFull: Fuzzy clustering technique
        Type: general
      – SubjectFull: Denial of service attacks
        Type: general
      – SubjectFull: Support vector machines
        Type: general
      – SubjectFull: K-nearest neighbor classification
        Type: general
    Titles:
      – TitleFull: Multilevel Intrusion Detection System Based on Machine Learning Techniques.
        Type: main
  BibRelationships:
    HasContributorRelationships:
      – PersonEntity:
          Name:
            NameFull: Grajales-Bustamante, J. D.
      – PersonEntity:
          Name:
            NameFull: Murillo-Escobar, J.
      – PersonEntity:
          Name:
            NameFull: Delgado-Trejos, Edilson
      – PersonEntity:
          Name:
            NameFull: Kendoush, Abdullah A.
    IsPartOfRelationships:
      – BibEntity:
          Dates:
            – D: 15
              M: 04
              Text: 4/15/2026
              Type: published
              Y: 2026
          Identifiers:
            – Type: issn-print
              Value: 23144904
          Numbering:
            – Type: volume
              Value: 2026
          Titles:
            – TitleFull: Journal of Engineering (2314-4912)
              Type: main
ResultId 1