Implement IDS system integrating machine learning for hai dang travel company

Implement IDS system integrating machine learning for Hai Dang Travel company C2NE.02 CAPSTONE PROJECT 2 1... TABLE OF CONTENTSINTRODUCTION PROJECT OBJECTIVES OPERATION DIAGRAM DATA CON

Implement IDS system integrating machine

learning for Hai Dang Travel company

C2NE.02

CAPSTONE PROJECT 2

1

OUR TEAM

Khai, Tran Dinh

Leader

Vu, Duong

The

Hieu, Le Quang

Hoang, Duong Ngoc

Mentor Assoc Prof

Nhu, Nguyen Gia

TABLE OF CONTENTS

INTRODUCTION

PROJECT OBJECTIVES

OPERATION DIAGRAM DATA

CONCLUSIO

N

3

Introduction01

The increase in numbers and types of networked devices inevitably leads to a wider surface of attack whereas the impact of successful attacks is becoming increasingly severe as more critical responsibilities are assumed be

these devices

5

HAI DANG TRAVEL

COMPANY

Overseas tour

Event

Group tour

7

Upgrade your network, warn

and prevent attacks

!!!

We came up with a solution to deploy an IDS

system with machine learning to detect and

prevent attacks

PROJECT OBJECTIVES 02

The goal of the project is to fulfill the requirements

of the customer

11

PROJECT OBJECTIVES

 Research new approaches for intrusion

detection does not depend on signatures.

 Build an Intrusion Detection System.

 Build a Machine Learning Model.

 Prevent intrusion

PRODUCT OVERVIEW

that monitors a network

or systems for malicious

activity or policy

violations

Machine learning is the study of computer algorithms that improve automatically through experience It is seen as

a subset of artificial intelligence

A data set consists of roughly two components The two components are rows and columns

Additionally, a key feature of a data set is that it is organized so that each row contains one observation 13

OPERATION DIAGRAM03

Company local network diagram

Hai Dang Travel

Network diagram

15

An overview of Logical Network

Diagram

Intrusion Detection System Operation

How IDS

work ?

Intrusion Detection System Operation 17

Intrusion Detection System Operation

How Machine Learning Model

Works

?

DATA PROCESSING 04

19

DATA PROCESSING

Datasets

CSE-CIC-IDS2018 dataset

provided by the Canadian

Institute for Cybersecurity

Ten days of operation inside

DATA PROCESSING

Datasets Overview

21

Number of flow per attack type

DATA PROCESSING

Datasets Problems

23

Data cleaning and features engineering

Remove

duplicate header Replace infinity value to mean Drop all null and negative value

Remove strong correlation features

Scale the data

Before After

Remove strong correlation features

25

Machine Learning

Gradient Boosting

Machine Learning

Gradient Boosting

27

Build Decision Tree from data

down_up_ratio active_mean flow_pkts_s flow_duration label

GRADIENT

BOOSTING

29

GRADIENT

BOOSTING

PRODUCT DEMO

31

In this project, we tried our best and finished it However, there are still some issues that need to be improved

in the latest updates In addition, our project has received a lot of positive contributions from international friends through GitHub