TCP/IP Feature Reduction in Intrusion Detection

Due to the amount of data that an IDS needs to exam- ine is very large, it is necessary to reduce the audit features and neglect the redundant features. Therefore, we investigated the performance to reduce TCP/IP features based on the decision tree rule-based statistical method(DTRS). Its main idea is to create n decision trees in n data subsets, extract the rules, work out the relatively important features in accordance with the frequency of use of different features and demonstrate the performance of re- duced features better than primary features by experimental re- sults.