Abstract:In the realm of cybersecurity, the incessant evolution of network attacks necessitates advanced and robust intrusion detection systems (IDS). The major issues with these systems are numerous: false positivenegative alarms, delayed response and detection time, size of processed data, adaptability to future threats, scalability of the system, difficulty in detecting distributed attacks, and downtime (fault tolerance). We propose a system that introduces a distributed framework aimed at enhancing network security by effectively identifying subtle deviations from normal network behavior. This is achieved through transfer learning based on artificial neural networks, and support vector machine (SVM), capitalizing on their complementary strengths in recognizing complex patterns and addressing high-dimensional datasets. To validate the efficacy of the proposed approach, the NSL-KDD dataset is utilized within a distributed IDS architecture. It consists of several intrusion detection nodes representing subnetworks. A node consists of two agents that work collaboratively. A way is proposed to avoid interference between analysis agents: the network agents manager monitors the functioning of the nodes and displays the results of each vulnerability-detecting node in each subnet separately. Such communication between agents should reduce FPAS (false positive alarms) significantly. The Detection engine extracts relevant features of network attacks to solve the problem of SVM in processing huge sizes of data and detect adaptive future threats to detect famous distributed denial of services (DDOS) attacks in real-time. The system is highly scalable by increasing the number of intrusion detection system nodes if necessary. Central processing is avoided to circumvent a system failure situation, where processing and decision-making take place at the detection node level within each subnet.

A near-autonomous and incremental intrusion detection system through active learning of known and unknown attacks

A Dynamic Intrusion Detection System Capable of Detecting Unknown Attacks

An incremental hybrid adaptive network-based IDS in Software Defined Networks to detect stealth attacks

Intrusion Detection System for Autonomous Vehicles Using Non-Tree Based Machine Learning Algorithms

A Scalable Network Intrusion Detection System Towards Detecting, Discovering, and Learning Unknown Attacks

Multilayer Machine Learning-Based Intrusion Detection System

Transfer learning-based self-learning intrusion detection system for in-vehicle networks

Generative adversarial attacks against intrusion detection systems using active learning

An adaptive distributed intrusion detection system in local network: Hybrid classification methods

A Novel Online Incremental Learning Intrusion Prevention System

Tree-IDS: an Incremental Intrusion Detection System for Connected Vehicles

Federated Incremental Learning Based Evolvable Intrusion Detection System for Zero-Day Attacks

An Intelligent Security System Using Enhanced Anomaly-Based Detection Scheme

i-2NIDS Novel Intelligent Intrusion Detection Approach for a Strong Network Security

usfAD Based Effective Unknown Attack Detection Focused IDS Framework

Enabling semi-supervised learning in intrusion detection systems

Multi-agent Reinforcement Learning-based Network Intrusion Detection System

Hybrid AI-Driven Techniques for Enhancing ZeroDay Exploit Detection in Intrusion Detection System (IDS)

Intrusion Detection System with Machine Learning and Multiple Datasets

Intrusion detection systems using long short-term memory (LSTM)

Intrusion detection techniques and approaches