Abstract:The massive growth of network traffic data leads to a large volume of datasets. Labeling these datasets for identifying intrusion attacks is very laborious and error-prone. Furthermore, network traffic data have complex time-varying non-linear relationships. The existing state-of-the-art intrusion detection solutions use a combination of various supervised approaches along with fused features subsets based on correlations in traffic data. These solutions often require high computational cost, manual support in fine-tuning intrusion detection models, and labeling of data that limit real-time processing of network traffic. Unsupervised solutions do reduce computational complexities and manual support for labeling data but current unsupervised solutions do not consider spatio-temporal correlations in traffic data. To address this, we propose a unified Autoencoder based on combining multi-scale convolutional neural network and long short-term memory (MSCNN-LSTM-AE) for anomaly detection in network traffic. The model first employs Multiscale Convolutional Neural Network Autoencoder (MSCNN-AE) to analyze the spatial features of the dataset, and then latent space features learned from MSCNN-AE employs Long Short-Term Memory (LSTM) based Autoencoder Network to process the temporal features. Our model further employs two Isolation Forest algorithms as error correction mechanisms to detect false positives and false negatives to improve detection accuracy. %Additionally, covariance matrices forms a Riemannian manifold that is naturally embedded with distance metrices that facilitates descriminative patterns for detecting malicious network traffic. We evaluated our model NSL-KDD, UNSW-NB15, and CICDDoS2019 dataset and showed our proposed method significantly outperforms the conventional unsupervised methods and other existing studies on the dataset.

Network Intrusion Detection Based on Contractive Sparse Stacked Denoising Autoencoder.

Network Intrusion Detection Method Based on Stacked Denoising Sparse Autoencoder and Extreme Learning Machine

Effective Network Intrusion Detection Via Representation Learning: A Denoising AutoEncoder Approach

Hybrid Network Intrusion Detection with Stacked Sparse Contractive Autoencoders and Attention-based Bidirectional LSTM

A Network Intrusion Detection Method Based on Stacked Autoencoder and LSTM

DACNN: Deep Autoencoding Convolutional Neural Network in Network Intrusion Detection

Improved Network Intrusion Classification with Attention-Assisted Bidirectional Lstm and Optimized Sparse Contractive Autoencoders

An Efficient Network Intrusion Detection Approach Based on Deep Learning

A New Intrusion Detection Method Based on Adaptive Feature Extraction

Network Intrusion Detection Through Stacking Dilated Convolutional Autoencoders

Deep Marginalized Sparse Denoising Auto-Encoder for Image Denoising

Cloud Intrusion Detection Method Based on Stacked Contractive Auto-Encoder and Support Vector Machine

Network Intrusion Detection Based on Stacked Sparse Autoencoder and Binary Tree Ensemble Method

A network intrusion detection framework on sparse deep denoising auto-encoder for dimensionality reduction

An Adaptive Image Denoising Method Based on Deep Rectified Denoising Auto-Encoder

A new intrusion detection model based on adaptability and robustness

Adaptive Image Denoising Based on Improved Stacked Sparse Denoising Auto-Encoder

Network Intrusion Detection Based on Sparse Autoencoder and IGA-BP Network

DSCAE: a Denoising Sparse Convolutional Autoencoder Defense Against Adversarial Examples

Autoencoder-based Unsupervised Intrusion Detection using Multi-Scale Convolutional Recurrent Networks

Research of Stacked Denoising Sparse Autoencoder.