Feature Selection and Intrusion Detection in Cloud Environment Based on Machine Learning Algorithms

Characteristics and way of behavior of attacks and infiltrators on computer networks are usually very difficult and need an expert. In addition; the advancement of computer networks, the number of attacks and infiltrations is also increasing. In fact, the knowledge coming from expert will lose its value over time and must be updated and made available to the system and this makes the need for expert person always felt. In machine learning techniques, knowledge is extracted from the data itself which has diminished the role of the expert. Various methods used to detect intrusions, such as statistical models, safe system approach, neural networks, etc., all weaken the fact that it uses all the features of an information packet rotating in the network for intrusion detection. Also, the huge volume of information and the unthinkable state space is also an important issue in the detection of intrusion. Therefore, the need for automatic identification of new and suspicious patterns in attempt for intrusion with the use of more efficient methods (Lower cost and higher performance) is needed more than before. The purpose of this study is to provide a new method based on intrusion detection systems and its various architectures aimed at increasing the accuracy of intrusion detection in cloud computing.

I. Introduction

Intrusion is a collection of illegal actions that take the system out of safety. A system is secure when it provides confidentiality, integrity and availability for its users. As network-based computer systems play a vital role in today's societies, they are targeted at more attacks and intrusions. In addition to methods of intrusion prevention such as authentication of the user, like the use of encrypted words, the use of firewalls and the protection of information such as encryption, intrusion detection is also used as another wall to protect computer systems [1], [2]. The purpose of the intrusion detection is to detect unauthorized use, abuse and damage to computer systems and networks by both internal users and external attackers [3].