IDPS Signature Classification with a Reject Option and the Incorporation of Expert Knowledge. (arXiv:2207.10797v1 [cs.CR])

As the importance of intrusion detection and prevention systems (IDPSs)
increases, great costs are incurred to manage the signatures that are generated
by malicious communication pattern files. Experts in network security need to
classify signatures by importance for an IDPS to work. We propose and evaluate
a machine learning signature classification model with a reject option (RO) to
reduce the cost of setting up an IDPS. To train the proposed model, it is
essential to design features that are effective …

classification expert idps reject signature