What is genetic algorithm in network security?
“3. Genetic Algorithm Applied to Intrusion Detection Applying genetic algorithm to intrusion detection seems to be a promising area. We discuss the motivation and implementation details in this section. 3.1 Overview Genetic algorithms can be used to evolve simple rules for network traffic (Sinclair, Pierce, and Matzner 1999). These rules are used to differentiate normal network connections from anomalous connections. These anomalous connections refer to events with probability of intrusions. The rules stored in the rule base are usually in the following form (Sinclair, Pierce, and Matzner 1999): if { condition } then { act } For the problems we presented above, the condition usually refers to a match between current network connection and the rules in IDS, such as source and destination IP addresses and port numbers (used in TCP/IP network protocols), duration of the connection, protocol used, etc., indicating the probability of an intrusion. The act field usually refers to an action d
