Abstract:Intrusion detection systems (IDS) monitor network activity to detect unusual patterns indicative of security breaches. However, many existing IDS solutions struggle with accurately identifying attacks within packet capture (PCAP) files. To address this limitation, a deep learning‐based dual IDS model is proposed. Utilizing the Cyber Intelligence Centre‐Distributed Denial of Service Attack 2019 dataset, this model begins by extracting features and attributes from PCAP files. Experimental results demonstrate that this model achieves 98.18% accuracy and 98.73% precision in classification tasks, significantly outperforming existing approaches. These findings highlight the effectiveness of the proposed system in enhancing intrusion detection capabilities. The rise of suspicious activities in network communication, driven by increased internet accessibility, necessitates the development of advanced intrusion detection systems (IDS). Existing IDS solutions often exhibit poor performance in detecting suspicious activity and fail to identify various attack types within packet capture (PCAP) files, which monitor network traffic. This paper proposes a deep learning‐based dual IDS model designed to address these issues. The process begins with utilizing the CSE‐CIC‐IDS2019 dataset to extract features from PCAP files. Suspicious activities are detected using the Exponential Geometric‐Gaussian Error Linear Units‐Gated Recurrent Unit (EG‐GELU‐GRU) method. Normal data undergoes further feature extraction and preprocessing through Log ZScore‐Jacosine Density‐Based Spatial Clustering of Applications with Noise (LZ‐JC‐DBSCAN). Feature selection is optimized using the Entropy Pearson R Correlation‐Red Panda optimization algorithm. Suspicious files are flagged, while load balancing is performed on normal data. Attack detection is achieved through word embedding with the Glorot Kaufman‐bidirectional encoder representations from transformers technique and classification via the EG‐GELU‐GRU model. Attacked packets are blocked, and the method is reapplied for attack‐type classification. Experimental results using Python demonstrate the model's superior performance, achieving 98.18% accuracy and 98.73% precision, surpassing existing approaches and significantly enhancing intrusion detection capabilities.

Spatial Expended-Dimension Character Based Host Intrusion Detection Model

A Mixed Intrusion Detection System Utilizing K-means and Extreme Gradient Boosting

Multi-agent based hybrid Intrusion detection system

Hybrid Intrusion Detection System for Complicated Network

A Host-based Multi-layer Intrusion Detection Model and Its Detection Methods

: Towards Fine-Grained Unknown Class Detection Against the Open-Set Attack Spectrum with Variable Legitimate Traffic

Peer-To-Peer Based Intrusion Detection Modeling And Analysis

STC‐IDS: Spatial–temporal correlation feature analyzing based intrusion detection system for intelligent connected vehicles

Distributed Detection of Network Intrusions Based on a Parametric Model.

An innovative model for an enhanced dual intrusion detection system using LZ‐JC‐DBSCAN, EPRC‐RPOA and EG‐GELU‐GRU

SEDAT: A Stacked Ensemble Learning-Based Detection Model for Multiscale Network Attacks

Design of an Intrusion Detection Model for Detecting Distributed Attacks

Hybrid Intrusion Detection System Based on Dempster-Shafer Evidence Theory

Windows-Hosted Intrusion Detection System Based on Support Vector Machines

3D-IDS: Doubly Disentangled Dynamic Intrusion Detection

Computer Network Security Analysis Modeling Based on Spatio-temporal Characteristics and Deep Learning Algorithm

Network Intrusion Detection Based on Behavior Patterns Mining

Intrusion Detection Via Wide and Deep Model.

Deep Feature Extraction in Intrusion Detection System

BR-HIDF: An Anti-Sparsity and Effective Host Intrusion Detection Framework Based on Multi-Granularity Feature Extraction

A integrated fuzzy-neural network intrusion detection model