Abstract:Since its inception, the Internet has been rapidly evolving. With the advancement of science and technology and the explosive growth of the population, the demand for the Internet has been on the rise. Many applications in education, healthcare, entertainment, science, and more are being increasingly deployed based on the internet. Concurrently, malicious threats on the internet are on the rise as well. Distributed Denial of Service (DDoS) attacks are among the most common and dangerous threats on the internet today. The scale and complexity of DDoS attacks are constantly growing. Intrusion Detection Systems (IDS) have been deployed and have demonstrated their effectiveness in defense against those threats. In addition, the research of Machine Learning (ML) and Deep Learning (DL) in IDS has gained effective results and significant attention. However, one of the challenges when applying ML and DL techniques in intrusion detection is the identification of unknown attacks. These attacks, which are not encountered during the system’s training, can lead to misclassification with significant errors. In this research, we focused on addressing the issue of Unknown Attack Detection, combining two methods: Spatial Location Constraint Prototype Loss (SLCPL) and Fuzzy C-Means (FCM). With the proposed method, we achieved promising results compared to traditional methods. The proposed method demonstrates a very high accuracy of up to 99.8% with a low false positive rate for known attacks on the Intrusion Detection Evaluation Dataset (CICIDS2017) dataset. Particularly, the accuracy is also very high, reaching 99.7%, and the precision goes up to 99.9% for unknown DDoS attacks on the DDoS Evaluation Dataset (CICDDoS2019) dataset. The success of the proposed method is due to the combination of SLCPL, an advanced Open-Set Recognition (OSR) technique, and FCM, a traditional yet highly applicable clustering technique. This has yielded a novel method in the field of unknown attack detection. This further expands the trend of applying DL and ML techniques in the development of intrusion detection systems and cybersecurity. Finally, implementing the proposed method in real-world systems can enhance the security capabilities against increasingly complex threats on computer networks.

Malicious Virtual Machines Detection Through A Clustering Approach

Machine Learning based Malware Detection in Cloud Environment using Clustering Approach

FCM–SVM based intrusion detection system for cloud computing environment

Detection of Information leakage in cloud

Automating cloud virtual machines allocation via machine learning

K-Means Clustering Analysis Based On Adaptive Weights For Malicious Code Detection

MDCD: A malware detection approach in cloud using deep learning

Malware Detection Based on Multi-level and Dynamic Multi-feature Using Ensemble Learning at Hypervisor

An AI-Driven VM Threat Prediction Model for Multi-Risks Analysis-Based Cloud Cybersecurity

An Optimal Cluster Based Intrusion Detection System for Defence Against Attack in Web and Cloud Computing Environments

Cloud Network Anomaly Detection Using Machine and Deep Learning Techniques— Recent Research Advancements

Analysing Virtual Machine Security in Cloud Systems

Feature Selection and Intrusion Detection in Cloud Environment based on Machine Learning Algorithms

Quantum walks-based classification model with resistance for cloud computing attacks

New comprehensive model based on virtual clusters and absorbing Markov chains for energy-efficient virtual machine management in cloud computing

Machine Learning-Based EDoS Attack Detection Technique Using Execution Trace Analysis

AI-Enabled System for Efficient and Effective Cyber Incident Detection and Response in Cloud Environments

MinCloud: Trusted and transferable MinHash-based framework for unknown malware detection for Linux cloud environments

A Hybrid Malware Detection System for Enhanced Cloud Security Utilizing Trust-Based Glow-Worm Swarm Optimization and Recurrent Deep Neural Networks

Cyberattack Detection in Mobile Cloud Computing: A Deep Learning Approach

Unknown DDoS Attack Detection with Fuzzy C-Means Clustering and Spatial Location Constraint Prototype Loss