Abstract:The development of robust anomaly-based network detection systems, which are preferred over static signal-based network intrusion, is vital for cybersecurity. The development of a flexible and dynamic security system is required to tackle the new attacks. Current intrusion detection systems (IDSs) suffer to attain both the high detection rate and low false alarm rate. To address this issue, in this paper, we propose an IDS using different machine learning (ML) and deep learning (DL) models. This paper presents a comparative analysis of different ML models and DL models on Coburg intrusion detection datasets (CIDDSs). First, we compare different ML- and DL-based models on the CIDDS dataset. Second, we propose an ensemble model that combines the best ML and DL models to achieve high-performance metrics. Finally, we benchmarked our best models with the CIC-IDS2017 dataset and compared them with state-of-the-art models. While the popular IDS datasets like KDD99 and NSL-KDD fail to represent the recent attacks and suffer from network biases, CIDDS, used in this research, encompasses labeled flow-based data in a simulated office environment with both updated attacks and normal usage. Furthermore, both accuracy and interpretability must be considered while implementing AI models. Both ML and DL models achieved an accuracy of 99% on the CIDDS dataset with a high detection rate, low false alarm rate, and relatively low training costs. Feature importance was also studied using the Classification and regression tree (CART) model. Our models performed well in 10-fold cross-validation and independent testing. CART and convolutional neural network (CNN) with embedding achieved slightly better performance on the CIC-IDS2017 dataset compared to previous models. Together, these results suggest that both ML and DL methods are robust and complementary techniques as an effective network intrusion detection system.

Evaluating Deep Learning Based Network Intrusion Detection System in Adversarial Environment

Adversarial Machine Learning for Network Intrusion Detection Systems: A Comprehensive Survey

A Novel Deep Learning based Model to Defend Network Intrusion Detection System against Adversarial Attacks

Adversarial Challenges in Network Intrusion Detection Systems: Research Insights and Future Prospects

Adversarial Attacks Against Deep Learning-Based Network Intrusion Detection Systems and Defense Mechanisms

Evaluating and Improving Adversarial Robustness of Machine Learning-Based Network Intrusion Detectors

Adversarial Attacks Against Network Intrusion Detection in IoT Systems

A Simple Framework to Enhance the Adversarial Robustness of Deep Learning-based Intrusion Detection System

A Comparative Study of Off-Line Deep Learning Based Network Intrusion Detection

Network Anomaly Intrusion Detection Based on Deep Learning Approach

Adversarial machine learning in Network Intrusion Detection Systems

Untargeted White-box Adversarial Attack with Heuristic Defence Methods in Real-time Deep Learning based Network Intrusion Detection System

Strengthening Network Security: Deep Learning Models for Intrusion Detection with Optimized Feature Subset and Effective Imbalance Handling

Network intrusion detection system: A systematic study of machine learning and deep learning approaches

Ensemble Machine Learning Techniques for Attack Prediction in NIDS Environment

Comparison of Machine Learning and Deep Learning Models for Network Intrusion Detection Systems

Addressing the class imbalance problem in network intrusion detection systems using data resampling and deep learning

A Self-supervised Adversarial Learning Approach for Network Intrusion Detection System.

A Deep Learning Model for Network Intrusion Detection with Imbalanced Data

Deep Learning Algorithms Used in Intrusion Detection Systems -- A Review

Development of a Machine-Learning Intrusion Detection System and Testing of Its Performance Using a Generative Adversarial Network