I'm new with machine learning, I have labeled data with 0 for normal and 1 for attack, The idea is like this:
I want to build a model that apply DT in the first level. The output from DT will be Either Normal or attack. Firstly if the data classified as attack by DT we alert, Secondly, if the data classified as a normal, we take the normal data and fed it to the second model (SVM) to double check if normal or attack.
I have read about ensemble learning, but most of these methods combine the models and take the average or weighting, Any idea how can we implement this? Thanks