Abstract:In recent years, the spike in the amount of information transmitted through communication infrastructures has increased due to the advances in technologies such as cloud computing, vehicular networks systems, the Internet of Things (IoT), etc. As a result, attackers have multiplied their efforts for the purpose of rendering network systems vulnerable. Therefore, it is of utmost importance to improve the security of those network systems. In this study, an IDS framework using Machine Learning (ML) techniques is implemented. This framework uses different types of Recurrent Neural Networks (RNNs), namely, Long-Short Term Memory (LSTM), Gated Recurrent Unit (GRU) and Simple RNN. To assess the performance of the proposed IDS framework, the NSL-KDD and the UNSW-NB15 benchmark datasets are considered. Moreover, existing IDSs suffer from low test accuracy scores in detecting new attacks as the feature dimension grows. In this study, an XGBoost-based feature selection algorithm was implemented to reduce the feature space of each dataset. Following that process, 17 and 22 relevant attributes were picked from the UNSW-NB15 and NSL-KDD, respectively. The accuracy obtained through the test subsets was used as the main performance metric in conjunction with the F1-Score, the validation accuracy, and the training time (in seconds). The results showed that for the binary classification tasks using the NSL-KDD, the XGBoost-LSTM achieved the best performance with a test accuracy (TAC) of 88.13%, a validation accuracy (VAC) of 99.49% and a training time of 225.46 s. For the UNSW-NB15, the XGBoost-Simple-RNN was the most efficient model with a TAC of 87.07%. For the multiclass classification scheme, the XGBoost-LSTM achieved a TAC of 86.93% over the NSL-KDD and the XGBoost-GRU obtained a TAC of 78.40% over the UNSW-NB15 dataset. These results demonstrated that our proposed IDS framework performed optimally in comparison to existing methods.

An Intrusion Detection System Using a Deep Neural Network with Gated Recurrent Units.

A Mixed Intrusion Detection System Utilizing K-means and Extreme Gradient Boosting

A Dynamic Intrusion Detection System Capable of Detecting Unknown Attacks

An Efficient Intrusion Detection Model Combined Bidirectional Gated Recurrent Units with Attention Mechanism.

A deep learning technique for intrusion detection system using a Recurrent Neural Networks based framework

A Deep Learning Approach for Intrusion Detection Using Recurrent Neural Networks

Network Anomaly Intrusion Detection Based on Deep Learning Approach

A Simple Recurrent Unit Model Based Intrusion Detection System with DCGAN

Deep-learning-based Intrusion Detection Methods

Construction of a network intrusion detection system based on a convolutional neural network and a bidirectional gated recurrent unit with attention mechanism

IDS with deep learning techniques

Robust Network Intrusion Detection Scheme Using Long-Short Term Memory Based Convolutional Neural Networks

Toward Efficient Intrusion Detection System Using Hybrid Deep Learning Approach

Time-related Network Intrusion Detection Model: A Deep Learning Method

Using a Long Short-Term Memory Recurrent Neural Network (LSTM-RNN) to Classify Network Attacks

Intrusion Detection Methods Based on Integrated Deep Learning Model.

A Bidirectional LSTM Deep Learning Approach for Intrusion Detection

An Intrusion Detection Method Based on Fully Connected Recurrent Neural Network

A Network Traffic Intrusion Detection Method for Industrial Control Systems Based on Deep Learning

Performance Evaluation of Deep Learning Based Network Intrusion Detection System across Multiple Balanced and Imbalanced Datasets