Implementación de técnicas de Machine Learning para la detección de anomalías basados en NIDS.

Abstract

Computer crimes and attacks on data networks have increased significantly, so it has become necessary to implement techniques that detect these threats and safeguard the information of organizations. Network Intrusion Detection Systems (NIDS) allow to detect anomalies and attacks in real time, by analyzing the local and outgoing traffic of the network. At present, to improve its performance, it has been chosen to use Machine Learning (ML) techniques that automate these processes and improve the detection of a computer anomaly. This paper implements ML techniques through the use of datasets, in the context of a NIDS, for the detection and prediction of anomalies on networks. Tests were performed with Non-Supervised and Supervised learning algorithms on NSL-KDD and UNSW-NB15 datasets. An exploratory analysis of the data together with dimensionality reduction techniques allowed us to understand the nature of the data, prior to the modeling. The best result showed a prediction level of anomalies on the network of 96.06%, showing that the Knowledge Discovery in Databases KDD) methodology combined with dimensionality reduction techniques is robust and extrapolated for real scenarios with different network configurations.