Abstract:With the increasing dimensionality of network traffic, extracting effective traffic features and improving the identification accuracy of different intrusion traffic have become critical in intrusion detection systems (IDS). However, both unsupervised and semisupervised anomalous traffic detection methods suffer from the drawback of ignoring potential correlations between features, resulting in an analysis that is not an optimal set. Therefore, in order to extract more representative traffic features as well as to improve the accuracy of traffic identification, this paper proposes a feature dimensionality reduction method combining principal component analysis and Hotelling’s T2 and a multilayer convolutional bidirectional long short-term memory (MSC_BiLSTM) classifier model for network traffic intrusion detection. This method reduces the parameters and redundancy of the model by feature extraction and extracts the dependent features between the data by a bidirectional long short-term memory (BiLSTM) network, which fully considers the influence between the before and after features. The network traffic is first characteristically downscaled by principal component analysis (PCA), and then the downscaled principal components are used as input to Hotelling’s T2 to compare the differences between groups. For datasets with outliers, Hotelling’s T2 can help identify the groups where the outliers are located and quantitatively measure the extent of the outliers. Finally, a multilayer convolutional neural network and a BiLSTM network are used to extract the spatial and temporal features of network traffic data. The empirical consequences exhibit that the suggested approach in this manuscript attains superior outcomes in precision, recall and F1-score juxtaposed with the prevailing techniques. The results show that the intrusion detection accuracy, precision, and F1-score of the proposed MSC_BiLSTM model for the CIC-IDS 2017 dataset are 98.71%, 95.97%, and 90.22%.

Abnormal Traffic Detection System Based on Feature Fusion and Sparse Transformer

MFVT: an anomaly traffic detection method merging feature fusion network and vision transformer architecture

A multi-feature spatial–temporal fusion network for traffic flow prediction

TCF-Trans: Temporal Context Fusion Transformer for Anomaly Detection in Time Series

Network Anomaly Traffic Detection via Multi-view Feature Fusion

Transformer fusion and histogram layer multispectral pedestrian detection network

DeepFlow: Abnormal Traffic Flow Detection Using Siamese Networks

MTC-NET: A Multi-Channel Independent Anomaly Detection Method for Network Traffic

Network Intrusion Traffic Detection Based on Feature Extraction

Spatiotemporal Fusion Transformer for large-scale traffic forecasting

A Two-Stage Anomaly Detection Method Based on User Preference Features and the Deep Fusion Model

Transformer-based Spatio-Temporal Unsupervised Traffic Anomaly Detection in Aerial Videos

Transformer Based Spatial-Temporal Fusion Network for Metro Passenger Flow Forecasting.

Adaptive Spatiotemporal Transformer Graph Network for Traffic Flow Forecasting by IoT Loop Detectors

Multi Self-supervised Pre-fine-tuned Transformer Fusion for Better Intelligent Transportation Detection

The Detection of Abnormal Behavior by Artificial Intelligence Algorithms Under Network Security

ADCT-Net: Adaptive traffic forecasting neural network via dual-graphic cross-fused transformer

A Multi-Stream Feature Fusion Approach for Traffic Prediction

Abnormal Traffic Detection Based on Attention and Big Step Convolution

A multi-channel anomaly detection method with feature selection and multi-scale analysis

Transformer Fusion and Residual Learning Group Classifier Loss for Long-Tailed Traffic Sign Detection