Abstract:recent years, deep learning-based network intrusion detection systems (IDS) have shown impressive results in detecting attacks. However, most existing IDS can only recognize known attacks that were included in their training data. When faced with unknown attacks, these systems are often unable to take appropriate actions and incorrectly classify them into known categories, leading to reduced detection performance. Furthermore, as the number and types of network attacks continue to increase, it becomes challenging for these IDS to update their model parameters promptly and adapt to new attack scenarios. To address these issues, this paper introduces a dynamic intrusion detection system, Dynamic Unknown Attack Intrusion Detection System (DUA-IDS). This system aims to learn and detect unknown attacks effectively. DUA-IDS comprises three components: Feature Extractor: This component employs CNN and Transformer models to extract data features from various perspectives. Threshold-Based Classifier: The second part utilizes the nearest mean rule of samples to classify known and unknown attacks, enabling the distinction between them. Dynamic Learning Module: The third part incorporates data playback and knowledge distillation techniques to retain existing category knowledge while continuously learning new attack categories. To assess the effectiveness of DUA-IDS, this paper conducted experiments using the UNSW-NB15 public dataset. The experimental results show that DUA-IDS improves the classification accuracy of flow network data with unknown traffic attacks. Can accurately distinguish unknown traffic and correctly classify known traffic. When dynamically learning unknown traffic, the classification accuracy of previously learned known traffic is less affected. This indicates the advantages of DUA-IDS in detecting unknown attacks and learning new attack categories.

Intrusion Detection Based Timed Automata for Ad hoc Networks

Malicious Node Detection in Ad Hoc Networks Using Timed Automata

Real-time protocol analysis for detecting routing attacks in wireless mesh networks

Intrusion Detection for Wireless Mesh Networks Using Finite State Machine

Specification-based Distributed Detection for Mobile Ad Hoc Networks

Distributed Intrusion Detection for Mobile Ad Hoc Networks

Research on Improved Intrusion Detection System in Mobile Ad hoc Network

Intrusion Detection And Simulation For High-Speed Networks

A novel intrusion detection method for mobile ad hoc networks

Multi-agent based hybrid Intrusion detection system

A Dynamic Intrusion Detection System Capable of Detecting Unknown Attacks

Design and Simulation of Intrusion Detection Based on DSR Protocol

A dynamically self-adaptive intrusion detection architecture for mobile ad hoc networks

An Architecture for Distributed Intrusion Detection System

Virtual-Lattice Based Intrusion Detection Algorithm over Actuator-Assisted Underwater Wireless Sensor Networks

An Intrusion Detection Architecture for Clustered Wireless Ad Hoc Networks

Attack Detection Policy in Ad Hoc Networks Based on Data Link Monitor

Intrusion Detection System using Node Analysis in Wireless Networks

Multi-agent Trust-Based Intrusion Detection Scheme for Wireless Sensor Networks.

An Intrusion Prevention Mechanism in Mobile Ad Hoc Networks.

A cooperative intrusion detection system based on autonomous agents