Information Gain applied to reduce model-building time in decision-tree-based intrusion detection system

Due to the large amount of sensitive data generated by websites, it is possible to understand the progress of attacks to their databases. This work proposes an intrusion detection system based on data mining and machine learning techniques to detect and mitigate the damage caused by these attacks. It adopts the Information Gain method of selecting attributes in order to reduce the model-building time without affecting the classification performance. Using the CIC-IDS 2017 dataset, this work shows how different decision tree algorithms (Random Forest and J48 Algorithm) behave even if they receive equal parameters and data. Using Information Gain to select attributes, the proposed system achieves a processing time reduction of up to 90%.

I. Introduction

Currently, many services are maintained by the Internet. Common in much of the world, these websites, and applications aggregate a large amount of information and there is a need to protect this sensitive data. This process begins with the detection of possible attacks [1]. In this respect, the use of data mining techniques helps in identifying them [2].