NIDS Using Genetic Algorithms Umer Khan Weekly Progress Review 6-Sept-2005

Review of GAs

Rule Base For a GA Rule: if { condition } then { act } if {the connection has the following information: source IP address ; destination IP address: ; source port number: 25; destination port number: 80; protocol used: IP} then {detect whether the connection is an intrusion or not}

Rule Set

Chromosomal Representation of Rules *13**1*16*43**25**80it

Formula for Fitness F = a / A – b / B

Cross Over b/w Rules

Future Directions Still to be discussed with Sir Ejaz and Dr.Waqar