Intrusion detection system (IDS) is one of the implemented solutions against harmful attacks. Furthermore, attackers always keep changing their tools and techniques. However, implementing an accepted IDS system is also a challenging task. In this paper, several experiments have been performed and evaluated to assess various machine learning classifiers based on KDD intrusion dataset. It succeeded to compute several performance metrics in order to evaluate the selected classifiers. The focus was on false negative and false positive performance metrics in order to enhance the detection rate of the intrusion detection system. The implemented experiments demonstrated that the decision table classifier achieved the lowest value of false negative while the random forest classifier has achieved the highest average accuracy rate.

Deep Neural Networks (DNNs) have been widely used to solve complex problems in natural language processing, image classification, and autonomous systems. The strength of DNNs is derived from their ability to model complex functions and to improve detection engines through deeper architecture. Despite the strengths of DNN engines, they present several crucial challenges, such as the number of hidden layers, the learning rate, and the neuron weight. These parameters are considered to play a crucial role in the ability of DNNs to detect anomalies. Optimizing these parameters could improve the detection engine and expand the utilization of DNNs for various areas of application. Bio-inspired optimization algorithms, especially Particle Swarm Intelligence (PSO) and the Gray Wolf Optimizer (GWO), have been widely used to optimize complex tasks because of their ability to explore the search space and their fast convergence. Despite the significant successes of PSO and GWO, there remains a gap in the literature regarding their hybridization and application in Intrusion Detection Systems (IDSs), such as Sunburst attack detection, especially using DNN. Therefore, in this paper, we introduce a hybrid detection model that investigates the ability to integrate PSO and GWO so as to improve the DNN architecture to detect the Sunburst attack. The PSO algorithm was used to optimize the learning rate and the number of hidden layers, while the GWO algorithm was used to optimize the neuron weight. The hybrid model was tested and evaluated based on open-source Sunburst attacks. The results demonstrate the effectiveness and robustness of the suggested hybrid DNN model. Furthermore, an extensive analysis was conducted by evaluating the suggested hybrid PSO–GWO along with other hybrid optimization techniques, namely Genetic Algorithm (GA), Differential Evolution (DE), and Ant Colony Optimization (ACO). The results demonstrate that the suggested hybrid model outperformed other optimization techniques in terms of accuracy, precision, recall, and F1-score.

This paper introduces a novel detection method for phishing website attacks while avoiding the issues associated with the deficiencies of the knowledge-based representation and the binary decision. The suggested detection method was performed using Fuzzy Rule Interpolation (FRI). The FRI reasoning methods added the benefit of enhancing the robustness of fuzzy systems and effectively reducing the system’s complexity. These benefits help the Intrusion Detection System (IDS) to generate more realistic and comprehensive alerts in case of phishing attacks. The proposed method was applied to an open-source benchmark phishing website dataset. The results show that the proposed detection method obtained a 97.58% detection rate and effectively reduced the false alerts. Moreover, it effectively smooths the boundary between normal and phishing attack traffic because of its fuzzy nature. It has the ability to generate the required security alert in case of deficiencies in the knowledge-based representation. In addition, the results obtained from the proposed detection method were compared with other literature results. The results showed that the accuracy rate of this work is competitive with other methods. In addition, the proposed detection method can generate the required anti-phishing alerts even if one of the anti-phishing sparse rules does not cover some input parameters (observations).

This paper presents a set of benchmarks to evaluate the performance of Fuzzy Rule Interpolation (FRI) methods under various challenging conditions. FRI methods are widely used for handling sparse fuzzy rule bases and reducing decision complexity. Despite lacking overlap with the antecedents of any rule in the rule bases, FRI can still produce a conclusion. To unify the requirements of FRI methods, several conditions have been proposed. Among these, the convex and normal fuzzy set condition and the Piece-wise linearity condition are the most common. In this paper, we introduce new benchmark scenarios for testing FRI methods. These benchmarks aim to serve as a reference for evaluating and comparing the accuracy and effectiveness of FRI methods. By using these benchmarks, researchers can compare different FRI methods and identify areas for improvement in the field of fuzzy inference.

Traditional fuzzy reasoning techniques demand a condensed fuzzy rule base to conclude a result. Still, due to incomplete data or a deficiency of expertise and knowledge, dense rule bases are not always available. Fuzzy interpolation methods have been widely explored to reasonably allow the interpolation of a fuzzy result using the closest current rules. Fuzzy rule interpolation is a type of fuzzy inference system in which conclusions can be obtained even with a few fuzzy rules. This benefit could be used to adapt the FRI to different application areas that suffer from a lack of knowledge. Alzubi et al. [17] offered a novel interpolative method that uses a weighted average based on the center point of the Incircle of the fuzzy sets. Nevertheless, the interpolated observation does not completely define the actual observation that is provided. In our offered extension to this method, a modification weight measure calculation and a shift technique are included to guarantee that the center point of the observation and the interpolated observation are mapped together. This weight measure calculation and shift technique enabled the capability of extrapolation to be conducted implicitly, which is also improves the performance results of the algorithm in the presence of multiple fuzzy rules and multidimensional priors.