
Modern software systems consist of several entities that interact among each other through the Web, and hence are vulnerable to potential mali-cious activities. Intrusion Detection Systems (IDS) intend to monitor such sys-tems and/or their sub-systems, including the network infrastructure, and identify malicious user behaviour on time, so that the appropriate measures can be taken to protect the relevant entities or mitigate the consequences. However, user be-haviour is often quite complicated and cannot be captured by simple rules. Ma-chine Learning (ML) techniques provide the means for automatically detecting potential intrusions based on previously collected data. In this article, a Net-work-based IDS is presented, which can detect several network attacks through the usage of ML techniques and relevant frameworks. The publicly available cybersecurity datasets that were used in this work are introduced and their con-tribution for intrusion detection purposes is evaluated. Also, the approach fol-lowed for dealing with false alarms and new attack types is presented and the relevant findings are discussed.
| selected citations These citations are derived from selected sources. This is an alternative to the "Influence" indicator, which also reflects the overall/total impact of an article in the research community at large, based on the underlying citation network (diachronically). | 1 | |
| popularity This indicator reflects the "current" impact/attention (the "hype") of an article in the research community at large, based on the underlying citation network. | Average | |
| influence This indicator reflects the overall/total impact of an article in the research community at large, based on the underlying citation network (diachronically). | Average | |
| impulse This indicator reflects the initial momentum of an article directly after its publication, based on the underlying citation network. | Average |
