Abstract:A network intrusion detection system is critical for cyber security against illegitimate attacks. In terms of feature perspectives, network traffic may include a variety of elements such as attack reference, attack type, a sub-category of attack, host information, malicious scripts, etc. In terms of network perspectives, network traffic may contain an imbalanced number of harmful attacks when compared to normal traffic. It is challenging to identify a specific attack due to complex features and data imbalance issues. To address these issues, this paper proposes an Intrusion Detection System using transformer-based transfer learning for Imbalanced Network Traffic (IDS-INT). IDS-INT uses transformer-based transfer learning to learn feature interactions in both network feature representation and imbalanced data. First, detailed information about each type of attack is gathered from network interaction descriptions, which include network nodes, attack type, reference, host information, etc. Second, the transformer-based transfer learning approach is developed to learn detailed feature representation using their semantic anchors. Third, the Synthetic Minority Oversampling Technique (SMOTE) is implemented to balance abnormal traffic and detect minority attacks. Fourth, the Convolution Neural Network (CNN) model is designed to extract deep features from the balanced network traffic. Finally, the hybrid approach of the CNN-Long Short-Term Memory (CNN-LSTM) model is developed to detect different types of attacks from the deep features. Detailed experiments are conducted to test the proposed approach using three standard datasets, i.e., UNSW-NB15, CIC-IDS2017, and NSL-KDD. An explainable AI approach is implemented to interpret the proposed method and develop a trustable model.

A Study on Transferability of Deep Learning Models for Network Intrusion Detection

Improving Transferability of Network Intrusion Detection in a Federated Learning Setup

Detect & Reject for Transferability of Black-box Adversarial Attacks Against Network Intrusion Detection Systems

Demystifying the Transferability of Adversarial Attacks in Computer Networks

A Transfer Learning Approach for Network Intrusion Detection

Transfer Attacks Revisited: A Large-Scale Empirical Study in Real Computer Vision Settings

Deep Learning-Enabled Heterogeneous Transfer Learning for Improved Network Attack Detection in Internal Networks

Distributed Transfer Network Learning Based Intrusion Detection.

A Survey on Transferability of Adversarial Examples across Deep Neural Networks

Towards Network Traffic Monitoring Using Deep Transfer Learning

Applying Transfer Learning Approaches for Intrusion Detection in Software-Defined Networking

Attack-Centric Approach for Evaluating Transferability of Adversarial Samples in Machine Learning Models

IDS-INT: Intrusion Detection System Using Transformer-Based Transfer Learning for Imbalanced Network Traffic

Divergence-Based Transferability Analysis for Self-Adaptive Smart Grid Intrusion Detection With Transfer Learning

Understanding and Enhancing the Transferability of Adversarial Examples

Reinforcement Learning Meets Network Intrusion Detection: A Transferable and Adaptable Framework for Anomaly Behavior Identification

Delving into Transferable Adversarial Examples and Black-box Attacks

On the Transferability of Adversarial Attacksagainst Neural Text Classifier

TAD: Transfer Learning-based Multi-Adversarial Detection of Evasion Attacks against Network Intrusion Detection Systems

A Comparative Study of Using Deep Learning Algorithms in Network Intrusion Detection

Application of deep learning to enhance the accuracy of intrusion detection in modern computer networks