This study investigates the implementation of the Gradient Boosting Machine (GBM) algorithm for network intrusion detection using the CICIDS2017 dataset within the CRISP-DM framework. The process encompasses Business Understanding, Data Understanding, and Data Preparation including data cleaning, categorical feature encoding, normalization, and data split (80 % training, 20 % testing). In the Modeling phase, GBM Hyperparameters (learning_rate = 0.1; max_depth = 5; n_estimators = 150) were optimized via Grid Search with 2-fold Cross Validation, and F1-Score was selected as the primary metric due to class imbalance. Evaluation on the test set yielded accuracy of 99.99 %, precision of 100 %, Recall of 99.98 %, and F1-Score of 99.99 %, demonstrating exceptional detection capability with minimal false negatives and false positives. Compared to previous studies, this GBM model outperforms in accuracy and stability without overfitting. These findings confirm GBM’s effectiveness for modern Intrusion Detection Systems and its suitability for Deployment in resource-constrained operational environments.
Copyrights © 2026