{"about":{"site":"https://codewithpapers.app","non_affiliation":"Code with Papers and Syntology are not affiliated with, endorsed by, or sponsored by Papers with Code, Meta, or the pwc-archive mirror.","licence":"CC BY-SA 4.0","licence_url":"https://creativecommons.org/licenses/by-sa/4.0/legalcode","attribution":"https://codewithpapers.app/attribution","modified":"archive material modified by Syntology; see the attribution page"},"url":"/paper/hybrid-isolation-forest-application-to","title":"Hybrid Isolation Forest - Application to Intrusion Detection","arxiv_id":"1705.03800","date":"2017-05-10","proceeding":null,"authors":["Pierre-François Marteau","Saeid Soheily-Khah","Nicolas Béchet"],"abstract":"From the identification of a drawback in the Isolation Forest (IF) algorithm\nthat limits its use in the scope of anomaly detection, we propose two\nextensions that allow to firstly overcome the previously mention limitation and\nsecondly to provide it with some supervised learning capability. The resulting\nHybrid Isolation Forest (HIF) that we propose is first evaluated on a synthetic\ndataset to analyze the effect of the new meta-parameters that are introduced\nand verify that the addressed limitation of the IF algorithm is effectively\novercame. We hen compare the two algorithms on the ISCX benchmark dataset, in\nthe context of a network intrusion detection application. Our experiments show\nthat HIF outperforms IF, but also challenges the 1-class and 2-classes SVM\nbaselines with computational efficiency.","url_abs":"http://arxiv.org/abs/1705.03800v1","url_pdf":"http://arxiv.org/pdf/1705.03800v1.pdf","source":{"archive":"pwc-archive (Hugging Face), CC BY-SA 4.0","snapshot":"2025-07-28","licence_url":"https://creativecommons.org/licenses/by-sa/4.0/legalcode","row_kind":"abstracts"},"code_links":[{"paper_slug":"hybrid-isolation-forest-application-to","repo_url":"https://github.com/pfmarteau/HIF","is_official":0,"mentioned_in_paper":0,"mentioned_in_github":1,"framework":"none","reach":null}],"tasks":[{"task_slug":"anomaly-detection","task_name":"Anomaly Detection"},{"task_slug":"computational-efficiency","task_name":"Computational Efficiency"},{"task_slug":"intrusion-detection","task_name":"Intrusion Detection"},{"task_slug":"network-intrusion-detection","task_name":"Network Intrusion Detection"}],"methods":[],"datasets_introduced":[],"methods_introduced":[],"results":[],"syntology":{"syntology_url":null,"atlas_url":null,"mcp":null,"developers":"https://syntology.ai/developers"},"arxiv_metadata":null,"syntology_extracted_results":null}