Abstract:Intrusion detection is an important technique that can provide solid protection for the network equipment against the security attacks. However, the attacks are usually unbalanced in different types and the attacks of unknown classes may also occur with the growth of Internet construction. In this case, the traditional machine learning-based intrusion detection methods usually have inferior detection accuracy and high false-positive rates. To tackle this problem, in this article, we propose a novel deep learning-based intrusion detection method named log-cosh conditional variational autoencoder (LCVAE). It inherits the capability of the conditional variational autoencoder (CVAE) that can capture the complex distribution of observed data and generate new data with prespecified classes. Different from the traditional CVAE, to better model the discrete property in the intrusion data, we design an effective loss term using the log hyperbolic cosine (log-cosh) function in the proposed LCVAE method. It can well balance the generation and reconstruction procedures and is more effective to generate diverse intrusion data for the imbalanced classes. To improve the detection accuracy, we utilize the classification based on convolutional neural network to perform feature extraction and classification based on the observed and generated intrusion data. We conduct extensive experiments on the challenging data set NSL-KDD with large-scale intrusion data. The results show that the superior detection performance of the proposed LCVAE method comparing with several state-of-the-art intrusion detection methods, and also demonstrate the potentiality of generating new intrusion data with promising diversity.

Profile creation technique research for intrusion detection based on CCA

Profile Creation Technique Research for Intrsuion Detection Based CCA

Detecting and Visualizing Profile Correlation in Subspace

Multi-agent based hybrid Intrusion detection system

Visualization Model Based on Density Field for Intrusion Detection

A Novel Intrusion Detection Method Based on Principle Component Analysis in Computer Security

A Hybrid Visualizing Approach Based on Adaptive Neuro-fuzzy Inference System, Decision Tree, and K-means for Intrusion Detection

Abnormal Behavior Detection based on User Profile

User Profiling for Intrusion Detection Using Dynamic and Static Behavioral Models

An efficient anomaly detection algorithm for vector-based intrusion detection systems

Low Computation Face Verification Using Class Center Analysis

Efficient Presentation of Multivariate Audit Data for Intrusion Detection of Web-Based Internet Services

HyIDSVis: Hybrid Intrusion Detection Visualization Analysis Based on Rare Category and Association Rules.

An Industrial Network Intrusion Detection Algorithm Based on Multifeature Data Clustering Optimization Model

Profiling program behavior for anomaly intrusion detection based on the transition and frequency property of computer audit data

Human Behaviour Profiling for Anomaly Detection

Using WPCA and EWMA Control Chart to Construct a Network Intrusion Detection Model

Profiling Program and User Behaviors for Anomaly Intrusion Detection Based on Non-Negative Matrix Factorization

Research on Principle Techniques for Network Intrusion Detection Based on Data Mining and Analysis Approach

Intrusion Alerts Correlation Based Assessment of Network Security

Toward Effective Intrusion Detection Using Log-Cosh Conditional Variational Autoencoder