Abstract:Network intrusion anomaly detection technique has been widely employed in computer network environments as a highly effective security prevention method. As network technology and network applications have advanced at a rapid pace, so too has network data traffic, resulting in an increase in virus and attack kinds. In the face of large-scale traffic and characteristic information, traditional intrusion detection will have problems such as low detection accuracy, high false negatives, and reliance on dimensionality reduction algorithms. Therefore, it is particularly important to establish a fast and efficient network intrusion anomaly detection method to deal with the current complex network environment. This work designs a computer network intrusion detection model with a recurrent neural network in order to explore a new intrusion detection method. The main purpose of this article include the following: (1) design a network security emergency response system architecture with the recurrent neural network model. This system consists of a management center module, a knowledge database module, a data acquisition module, a risk detection tool module, a risk analysis and processing module, a data protection module, and a remote connection auxiliary module. The modules cooperate with each other to complete system functions. (2) Aiming at the risk analysis and processing module, a network intrusion detection model combining bidirectional long short-term memory (BiLSTM) and deep neural network (DNN) is designed. In view of the lack of consideration of the before-and-after relevance of intrusion data features and the multifeature problem in existing models, the use of BiLSTM to extract the relevance between features and the use of DNN to extract deeper features are proposed. Aiming at the problem that the model lacks consideration of the importance of features, it is proposed to embed an attention mechanism into the network to increase consideration for the importance of features. (3) Massive experiments have verified the reliability and effectiveness of the method proposed in this work.

An efficient network behavior anomaly detection using a hybrid DBN-LSTM network

A Novel Intrusion Detection Algorithm Based on Long Short Term Memory Network

A hybrid neural network approach to the classification of novel attacks for intrusion detection

A Deep Learning Model for Network Intrusion Detection with Imbalanced Data

Network Anomaly Intrusion Detection Based on Deep Learning Approach

A Hypertuned Lightweight and Scalable LSTM Model for Hybrid Network Intrusion Detection

Network intrusion detection based on IE-DBN model

Efficient Deep CNN-BiLSTM Model for Network Intrusion Detection

Network Abnormal Behavior Detection Method Based on Affinity Propagation

Interaction Context-Aware Network Behavior Anomaly Detection for Discovering Unknown Attacks

Computer Network Intrusion Anomaly Detection with Recurrent Neural Network

A Network Traffic anomaly Detection method based on CNN and XGBoost

Network Anomaly Detection Using LSTM Based Autoencoder

Anomaly detection in ad-hoc networks based on deep learning model: A plug and play device

An innovative network intrusion detection system (NIDS): Hierarchical deep learning model based on Unsw-Nb15 dataset

One-Class LSTM Network for Anomalous Network Traffic Detection

Machine Learning for Detecting Anomalies and Intrusions in Communication Networks

HDCBAN: Hybrid Neural Network for Network Intrusion Detection System

Campus Network Traffic Prediction and Anomaly Detection Based on Deep Learning

Modeling Network Intrusion Detection System Using Feed-Forward Neural Network Using UNSW-NB15 Dataset

Network Intrusion Detection Based on Hybrid Network Model and Federated Learning