Abstract:Recently, network security has become an extremely vital issue that beckons the development of accurate and efficient solutions capable of effectively defending our network systems and the valuable information journeying through them. In this article, a distributed multiagent intrusion detection system (IDS) architecture is proposed, which attempts to provide an accurate and lightweight solution to network intrusion detection by tackling issues associated with the design of a distributed multiagent system, such as poor system scalability and the requirements of excessive processing power and memory storage. The proposed IDS architecture consists of (i) the Host layer with lightweight host agents that perform anomaly detection in network connections to their respective hosts, and (ii) the Classification layer whose main functions are to perform misuse detection for the host agents, detect distributed attacks, and disseminate network security status information to the whole network. The intrusion detection task is achieved through the employment of the lightweight Adaptive Sub-Eigenspace Modeling (ASEM)-based anomaly and misuse detection schemes. Promising experimental results indicate that ASEM-based schemes outperform the KNN and LOF algorithms, with high detection rates and low false alarm rates in the anomaly detection task, and outperform several well-known supervised classification methods such as C4.5 Decision Tree, SVM, NN, KNN, Logistic, and Decision Table (DT) in the misuse detection task. To assess the performance in a real-world scenario, the Relative Assumption Model, feature extraction techniques, and common network attack generation tools are employed to generate normal and anomalous traffic in a private LAN testbed. Furthermore, the scalability performance of the proposed IDS architecture is investigated through the simulation of the proposed agent communication scheme, and satisfactory linear relationships for both degradation of system response time and agent communication generated network traffic overhead are achieved.

Collaborative Multi-agent Reinforcement Learning for Intrusion Detection

MARNet: Backdoor Attacks Against Cooperative Multi-Agent Reinforcement Learning

Multi-agent based hybrid Intrusion detection system

Multi-agent Reinforcement Learning-based Network Intrusion Detection System

Big-IDS: a decentralized multi agent reinforcement learning approach for distributed intrusion detection in big data networks

Reinforcement Learning Meets Network Intrusion Detection: A Transferable and Adaptable Framework for Anomaly Behavior Identification

Large-scale Network Intrusion Detection System Based on MultiAgents

Reinforcement-Learning Based Network Intrusion Detection with Human Interaction in the Loop.

Deep Q-Learning Based Reinforcement Learning Approach for Network Intrusion Detection

A Survey for Deep Reinforcement Learning Based Network Intrusion Detection

Packet-Level and Flow-Level Network Intrusion Detection Based on Reinforcement Learning and Adversarial Training

An Adaptive Intrusion Detection System for WSN using Reinforcement Learning and Deep Classification

A Multi-Agents Deep Reinforcement Learning Autonomous Security Management Approach for Internet of Things

Towards Secure Multi-Agent Deep Reinforcement Learning: Adversarial Attacks and Countermeasures

Intrusion Detection Based on Generative Adversarial Network of Reinforcement Learning Strategy for Wireless Sensor Networks

MAFSIDS: a reinforcement learning-based intrusion detection model for multi-agent feature selection networks

Network intrusion detection through Adaptive Sub-Eigenspace Modeling in multiagent systems

IRADA: integrated reinforcement learning and deep learning algorithm for attack detection in wireless sensor networks

Representation Learning-Based Network Intrusion Detection System by Capturing Explicit and Implicit Feature Interactions

A Deep Reinforcement Learning-Based Method Applied for Solving Multi-Agent Defense and Attack Problems.

A Deep Reinforcement Learning Based Intrusion Detection Strategy for Smart Vehicular Networks