Abstract:The development of robust anomaly-based network detection systems, which are preferred over static signal-based network intrusion, is vital for cybersecurity. The development of a flexible and dynamic security system is required to tackle the new attacks. Current intrusion detection systems (IDSs) suffer to attain both the high detection rate and low false alarm rate. To address this issue, in this paper, we propose an IDS using different machine learning (ML) and deep learning (DL) models. This paper presents a comparative analysis of different ML models and DL models on Coburg intrusion detection datasets (CIDDSs). First, we compare different ML- and DL-based models on the CIDDS dataset. Second, we propose an ensemble model that combines the best ML and DL models to achieve high-performance metrics. Finally, we benchmarked our best models with the CIC-IDS2017 dataset and compared them with state-of-the-art models. While the popular IDS datasets like KDD99 and NSL-KDD fail to represent the recent attacks and suffer from network biases, CIDDS, used in this research, encompasses labeled flow-based data in a simulated office environment with both updated attacks and normal usage. Furthermore, both accuracy and interpretability must be considered while implementing AI models. Both ML and DL models achieved an accuracy of 99% on the CIDDS dataset with a high detection rate, low false alarm rate, and relatively low training costs. Feature importance was also studied using the Classification and regression tree (CART) model. Our models performed well in 10-fold cross-validation and independent testing. CART and convolutional neural network (CNN) with embedding achieved slightly better performance on the CIC-IDS2017 dataset compared to previous models. Together, these results suggest that both ML and DL methods are robust and complementary techniques as an effective network intrusion detection system.

Comparative Study Of Cnn And Rnn For Deep Learning Based Intrusion Detection System

NIDS: Neural Network Based Intrusion Detection System

A Deep Learning Approach for Intrusion Detection Using Recurrent Neural Networks

Network Anomaly Intrusion Detection Based on Deep Learning Approach

An Intrusion Detection System Using a Deep Neural Network with Gated Recurrent Units.

A Comparative Study of Using Deep Learning Algorithms in Network Intrusion Detection

An Intrusion Detection Method Based on Fully Connected Recurrent Neural Network

Applying convolutional neural network for network intrusion detection

A Comparative Study of Off-Line Deep Learning Based Network Intrusion Detection

A Survey of CNN-Based Network Intrusion Detection

Efficient Deep CNN-BiLSTM Model for Network Intrusion Detection

Comparison of Machine Learning and Deep Learning Models for Network Intrusion Detection Systems

Evolving Deep Convolutional Neural Network for Intrusion Detection Based on NEAT.

Hybrid Intrusion Detection Method Based On K-Means And Cnn For Smart Home

An efficient deep recurrent neural network for detection of cyberattacks in realistic IoT environment

DL-IDS: Extracting Features Using CNN-LSTM Hybrid Network for Intrusion Detection System

Intrusion Detection: A Deep Learning Approach

A Scalable Network Intrusion Detection System using Bi-LSTM and CNN

Intrusion Detection System Using Voting-Based Neural Network

Network Intrusion Detection CNN Model for Realistic Network Attacks Based on Network Traffic Classification

Robust Network Intrusion Detection Scheme Using Long-Short Term Memory Based Convolutional Neural Networks