Abstract:With the development of network technology and the updating of intelligent networking devices, the variety of cyber attacks and the number of users being attacked are increasing. Intrusion Detection Systems (IDS) are commonly used in the field of network security to detect anomalous activity and behavior. Many previous works have achieved high detection accuracy on standard testing data sets by implementing mature Machine Learning (ML) algorithms. Inspired by the network ontology researches,, we propose two Long Short-Term Memory (LSTM) based IDSs with deep feature extraction: multi-class feature extraction IDS and dual-class feature extraction IDS. Through our experiments on the CICIDS2017 data set, we have found that multi-class feature extraction IDS can better identify the types of cyber attacks while the dual-class feature extraction IDS can better recall new attacks. We conclude that when the structure and characteristics of the classifier are limited, a reasonable selection of the feature extraction space can help improve the characteristics of the classifier and better achieve the downstream tasks in the security field.

Intrusion Detection Research Based on Alarm Information of IDS

Study of Adaptive Intrusion Detection with Data Mining

An Intrusion Detection System Based On System Call

Research on Data Mining-based Intrusion Detection in Real-time Environment

An Intrusion Alarming System Based on Self-Similarity of Network Traffic

Study of Intrusion Detection Based on Alarm Deviation Analysis

Research of Intrusion Detection Based on Intelligence and Cooperation Technology

Study of an IDS Alert Fusion and Correlation Model

Research and implementation on snort-based hybrid intrusion detection system

Survey on Intrusion Detection Techniques

Alert Correlation by A Retrospective Method

Design and Implementation of Distributed Intrusion Detection System Based on P2DR Model

Alert Correlation Through Results Tracing Back to Reasons

Deep Feature Extraction in Intrusion Detection System

Survey of Alerts Correlation and Testing Dataset of Intrusion Detection System

Promising Intrusion Detection System

Research of Intrusion Detection System Dataset Evaluation

Design and Implementation of Intrusion Detection System Based on System-Call

Study and Implementation of a Net-based Intrusion Detection System

Research on Decision-Making of IDS with Multiple Parameters

An Intruder Locating System Based on Network Intrusion Detection