Abstract:The analysis of a substantial portion of network data is a requirement for almost any machine learning-based network intrusion detection method. High dimension features, a lack of labelled datasets, and inflexible feature selection are some of the difficulties it encounters. This paper proposes an intrusion detection method based on stacked sparse autoencoder and improved Gaussian mixture model (SIGMOD). The method utilizes the stacked sparse autoencoder to produce non-linear dimensionality reduction after first using the Pearson correlation coefficient to achieve linear dimensionality reduction. It can lessen redundant data, obtain low-dimensional features and generate reconstruction errors of the samples, which are subsequently fed into the improved Gaussian mixture model. The method finally judges whether it is abnormal according to the output sample energy threshold of the improved Gaussian mixture model. Unlike the traditional anomaly detection technology that performs dimensionality reduction and clustering in two separate steps, SIGMOD jointly optimizes the parameters of the stacked sparse autoencoder and the Gaussian mixture model in an end-to-end manner, avoiding the key feature loss of cluster analysis in dimensionality reduction by the two-step method. The experiment results on the UNSW-NB15 dataset demonstrate that SIGMOD performs significantly better than the conventional anomaly detection approach.

Bidirectional Data Reduction Based on PCA and Combined SSGA in Intrusion Detection System

A Mixed Intrusion Detection System Utilizing K-means and Extreme Gradient Boosting

Multi-agent based hybrid Intrusion detection system

An adaptive network intrusion detection method based on PCA and support vector machines

An Intrusion Detection Method Based on Principal Component Analysis and Decision Tree

Intrusion detection algorithm based on improved principal component analysis

Intrusion Detection Model Based on Distributed Integrated Learning

A Hierarchical Intrusion Detection Model Based on the PCA Neural Networks

Application and Performance Analysis of Data Preprocessing for Intrusion Detection System.

Investigation and Design of Method of Intrusion Detection Data Classification Based on Kernel Machine

An Intrusion Detection System Using a Deep Neural Network with Gated Recurrent Units.

An Intrusion Detection Model Based on Feature Reduction and Convolutional Neural Networks

Intrusion Detection Feature Selection Method Based on Principal Component Analysis

A New Intelligent Intrusion Detection Method Based on Attribute Reduction and Parameters Optimization of SVM

A Hybrid Method for Intrusion Detection with Ga-Based Feature Selection

The abnormal traffic detection scheme based on PCA and SSH

Feature Selection Based on Rough Set and Modified Genetic Algorithm for Intrusion Detection

A Combined Feature Selection Method Based on Clustering in Intrusion Detection

Multi-kernel intrusion detection system based on KPCA and BP neural network

Attribute Selection Based Genetic Network Programming for Intrusion Detection System

An Intrusion Detection Method Based on Stacked Sparse Autoencoder and Improved Gaussian Mixture Model