Multi-attribute decision-making for intrusion detection systems: a systematic review

Alamleh, Amneh and Albahri, O. S. and Zaidan, A. A. and Alamoodi, A. H. and Albahri, A. S. and Zaidan, B. B. and Qahtan, Sarah and Ismail, Amelia Ritahani and Malik, R. Q. and Baqer, M. J. and Jasim, Ali Najm and Al-Samarraay, Mohammed S. (2022) Multi-attribute decision-making for intrusion detection systems: a systematic review. International Journal of Information Technology & Decision Making, 22 (1). pp. 589-636. ISSN 0219-6220 E-ISSN 1793-6845

	PDF (Journal) - Published Version Restricted to Repository staff only Download (2MB) | Request a copy
Preview	PDF (Scopus) - Supplemental Material Download (795kB) | Preview

Abstract

Intrusion detection systems (IDSs) employ sophisticated security techniques to detect malicious activities on hosts and/or networks. IDSs have been utilized to ensure the security of computer and network systems. However, numerous evaluation and selection issues related to several cybersecurity aspects of IDSs were solved using a decision support approach. The approach most often utilized for decision support in this regard is multi-attribute decision-making (MADM). MADM can aid in selecting the most optimal solution from a huge pool of available alternatives when the appropriate evaluation attributes are provided. The openness of the MADM methods in solving numerous cybersecurity issues makes it largely efficient for IDS applications. We must first understand the available solutions and gaps in this area of research to provide an insightful analysis of the combination of MADM techniques with IDS and support researchers. Therefore, this study conducts a systematic review to organize the research landscape into a consistent taxonomy. A total of 28 articles were considered for this taxonomy and were classified into three main categories: data analysis and detection (n=4), response selection (n=7)) and IDS evaluation (n=17)). Each category was thoroughly analyzed in terms of a variety of aspects, including the issues and challenges confronted, as well as the contributions of each study. Furthermore, the datasets, evaluation attributes, MADM methods, evaluation and validation and bibliography analysis used by the selected articles are discussed. In this study, we highlighted the existing perspective and opportunities for MADM in the IDS literature through a systematic review, providing researchers with a valuable reference.

Item Type:	Article (Review)
Uncontrolled Keywords:	Intrusion detection system decision support multi-attribute decision-making
Subjects:	Q Science > QA Mathematics > QA75 Electronic computers. Computer science
Kulliyyahs/Centres/Divisions/Institutes (Can select more than one option. Press CONTROL button):	Kulliyyah of Information and Communication Technology Kulliyyah of Information and Communication Technology Kulliyyah of Information and Communication Technology > Department of Computer Science Kulliyyah of Information and Communication Technology > Department of Computer Science
Depositing User:	Amelia Ritahani Ismail
Date Deposited:	13 Feb 2023 14:39
Last Modified:	13 Feb 2023 14:40
URI:	http://irep.iium.edu.my/id/eprint/102732

Actions (login required)

View Item