Abstract:Intrusion detection systems (IDS) monitor network activity to detect unusual patterns indicative of security breaches. However, many existing IDS solutions struggle with accurately identifying attacks within packet capture (PCAP) files. To address this limitation, a deep learning‐based dual IDS model is proposed. Utilizing the Cyber Intelligence Centre‐Distributed Denial of Service Attack 2019 dataset, this model begins by extracting features and attributes from PCAP files. Experimental results demonstrate that this model achieves 98.18% accuracy and 98.73% precision in classification tasks, significantly outperforming existing approaches. These findings highlight the effectiveness of the proposed system in enhancing intrusion detection capabilities. The rise of suspicious activities in network communication, driven by increased internet accessibility, necessitates the development of advanced intrusion detection systems (IDS). Existing IDS solutions often exhibit poor performance in detecting suspicious activity and fail to identify various attack types within packet capture (PCAP) files, which monitor network traffic. This paper proposes a deep learning‐based dual IDS model designed to address these issues. The process begins with utilizing the CSE‐CIC‐IDS2019 dataset to extract features from PCAP files. Suspicious activities are detected using the Exponential Geometric‐Gaussian Error Linear Units‐Gated Recurrent Unit (EG‐GELU‐GRU) method. Normal data undergoes further feature extraction and preprocessing through Log ZScore‐Jacosine Density‐Based Spatial Clustering of Applications with Noise (LZ‐JC‐DBSCAN). Feature selection is optimized using the Entropy Pearson R Correlation‐Red Panda optimization algorithm. Suspicious files are flagged, while load balancing is performed on normal data. Attack detection is achieved through word embedding with the Glorot Kaufman‐bidirectional encoder representations from transformers technique and classification via the EG‐GELU‐GRU model. Attacked packets are blocked, and the method is reapplied for attack‐type classification. Experimental results using Python demonstrate the model's superior performance, achieving 98.18% accuracy and 98.73% precision, surpassing existing approaches and significantly enhancing intrusion detection capabilities.

HyIDSVis: Hybrid Intrusion Detection Visualization Analysis Based on Rare Category and Association Rules.

A Mixed Intrusion Detection System Utilizing K-means and Extreme Gradient Boosting

A Hybrid Visualizing Approach Based on Adaptive Neuro-fuzzy Inference System, Decision Tree, and K-means for Intrusion Detection

Multi-agent based hybrid Intrusion detection system

A Dynamic Intrusion Detection System Capable of Detecting Unknown Attacks

A Novel Intrusion Detection System Based on an Optimal Hybrid Kernel Extreme Learning Machine

A Hybrid Intrusion Detection System Based on Scalable K-Means+ Random Forest and Deep Learning

An Intrusion Detection Framework Based on Hybrid Multi-Level Data Mining

A hybrid interpretable deep structure based on adaptive neuro-fuzzy inference system, decision tree, and K-means for intrusion detection

Real-Time Intrusion Detection Based on Decision Fusion in Industrial Control Systems

IntruDTS: Interactive Visual Analysis System for Intrusion Detection in Time Series

Hybrid Intrusion Detection System Based on Dempster-Shafer Evidence Theory

Rare Association Rule Mining for Network Intrusion Detection

Building an Effective Intrusion Detection System by Using Hybrid Data Optimization Based on Machine Learning Algorithms

Hybrid Intrusion Detection Method Based on CM-K-Means

HIDS-DT: an Effective Hybrid Intrusion Detection System Based on Decision Tree

Learning to Detect: A Data-driven Approach for Network Intrusion Detection

An innovative model for an enhanced dual intrusion detection system using LZ‐JC‐DBSCAN, EPRC‐RPOA and EG‐GELU‐GRU

Hybrid Intrusion Detection System Based on the Stacking Ensemble of C5 Decision Tree Classifier and One Class Support Vector Machine

Attribute Selection Based Genetic Network Programming for Intrusion Detection System

An intelligent algorithm with feature selection and decision rules applied to anomaly intrusion detection