Abstract:The escalating frequency of intrusions in networked systems has spurred the exploration of new research avenues in devising artificial intelligence (AI) techniques for intrusion detection systems (IDS). Various AI techniques have been used to automate network intrusion detection tasks, yet each model possesses distinct strengths and weaknesses. Selecting the optimal model for a given dataset can pose a challenge, necessitating the exploration of ensemble methods to enhance generalization and applicability in network intrusion detection. This paper addresses this gap by conducting a comprehensive evaluation of diverse individual models and both simple and advanced ensemble methods for network IDS. We introduce an ensemble learning framework tailored for assessing individual models and ensemble methods in network intrusion detection tasks. Our framework encompasses the loading of input datasets, training of individual models and ensemble methods, and the generation of evaluation metrics. Furthermore, we incorporate all features across individual models and ensemble techniques. The study presents results for our framework, encompassing 14 methods, including various bagging, stacking, blending, and boosting techniques applied to multiple base learners such as decision trees, neural networks, and among others. We evaluate the framework using two distinct network intrusion datasets, RoEduNet-SIMARGL2021 and CICIDS-2017, each possessing unique characteristics. Additionally, we categorize AI models based on their performances on our evaluation metrics and via their confusion matrices. Our assessment demonstrates the efficacy of learning across most setups explored in this study. Furthermore, we contribute to the community by releasing our source codes, providing a foundational ensemble learning framework for network intrusion detection.

Error-correcting Ability Based Collaborative Multi-Layer Selective Classifier Ensemble Model for Intrusion Detection

Multiple Classification Algorithm Based on Ensemble Learning for Intrusion Detection

The Use of Ensemble Models for Multiple Class and Binary Class Classification for Improving Intrusion Detection Systems

An Adaptive Ensemble Machine Learning Model for Intrusion Detection.

An Efficient Network Intrusion Detection System Based on Feature Selection and Ensemble Classifier.

Building an Efficient Intrusion Detection System Based on Feature Selection and Ensemble Classifier

A Two-Layer Soft-Voting Ensemble Learning Model for Network Intrusion Detection.

Sustainable Ensemble Learning Driving Intrusion Detection Model

An Ensemble Method Based on Selection Using Bat Algorithm for Intrusion Detection

ICDF: Intrusion collaborative detection framework based on confidence

MCES: Multi-classifier Ensemble System for Malware Detection and Identification

Explainable AI-based Innovative Hybrid Ensemble Model for Intrusion Detection

Optimized Ensemble Learning Models Based on Clustering and Hybrid Deep Learning for Wireless Intrusion Detection

A Comprehensive Comparative Study of Individual ML Models and Ensemble Strategies for Network Intrusion Detection Systems

Hybrid Ensemble Broad Learning System for Network Intrusion Detection

Multi-dimensional feature fusion and stacking ensemble mechanism for network intrusion detection

Ensemble-Learning Framework for Intrusion Detection to Enhance Internet of Things' Devices Security

Multilayer Machine Learning-Based Intrusion Detection System

An integrated intrusion detection framework based on subspace clustering and ensemble learning

A Hybrid Spectral Clustering and Deep Neural Network Ensemble Algorithm for Intrusion Detection in Sensor Networks

MEMBER: A multi-task learning model with hybrid deep features for network intrusion detection