Abstract:

       This paper improves classical information gain based decision tree algorithm and then presents a decision tree and property relation combined intrusion detection algorithm. The algorithm combines the pruning algorithm of integrated strategy to avoid the impact of excessive fitting on test results. Experimental results show that the algorithm can not only make better judgments when confronting known attacks but also still have certain detection capability when facing unknown attacks. The algorithm thus has better performance and availability.

Key words: pruning algorithm, intrusion detection, decision tree algorithm, information gain