Abstract:Currently, expert systems and applied machine learning algorithms are widely used to automate network intrusion detection. In critical infrastructure applications of communication technologies, the interaction among various industrial control systems and the Internet environment intrinsic to the IoT technology makes them susceptible to cyber-attacks. Given the existence of the enormous network traffic in critical Cyber-Physical Systems (CPSs), traditional methods of machine learning implemented in network anomaly detection are inefficient. Therefore, recently developed machine learning techniques, with the emphasis on deep learning, are finding their successful implementations in the detection and classification of anomalies at both the network and host levels. This paper presents an ensemble method that leverages deep models such as the Deep Neural Network (DNN) and Long Short-Term Memory (LSTM) and a meta-classifier (i.e., logistic regression) following the principle of stacked generalization. To enhance the capabilities of the proposed approach, the method utilizes a two-step process for the apprehension of network anomalies. In the first stage, data pre-processing, a Deep Sparse AutoEncoder (DSAE) is employed for the feature engineering problem. In the second phase, a stacking ensemble learning approach is utilized for classification. The efficiency of the method disclosed in this work is tested on heterogeneous datasets, including data gathered in the IoT environment, namely IoT-23, LITNET-2020, and NetML-2020. The results of the evaluation of the proposed approach are discussed. Statistical significance is tested and compared to the state-of-the-art approaches in network anomaly detection.

Deep Learning-Based Anomaly Detection in Network Traffic for Cyber Threat Identification

Network anomaly detection using deep learning techniques

Detecting Abnormal Traffic in Large-Scale Networks

Network Traffic Anomaly Detection via Deep Learning

Network Anomaly Intrusion Detection Based on Deep Learning Approach

Deep Learning for Anomaly Detection in IoT Systems: Techniques, Applications, and Future Directions

A Convolutional Neural Network for Improved Anomaly-Based Network Intrusion Detection

A Hybrid Deep Learning Anomaly Detection Framework for Intrusion Detection

A Comparative Study of Using Deep Learning Algorithms in Network Intrusion Detection

An Anomaly Intrusion Detection for High-Density Internet of Things Wireless Communication Network Based Deep Learning Algorithms

Deep Learning Based Anomaly Detection Scheme in Software-Defined Networking

An efficient and robust deep learning based network anomaly detection against distributed denial of service attacks

A Deep Learning Ensemble for Network Anomaly and Cyber-Attack Detection

Machine Learning based Anomaly Detection for 5G Networks

Campus Network Traffic Prediction and Anomaly Detection Based on Deep Learning

Real-Time Detection of Network Traffic Anomalies in Big Data Environments Using Deep Learning Models

A survey of deep learning-based network anomaly detection

Network Anomaly Detection for NSL-KDD Dataset Using Deep Learning

Machine Learning-Based Anomaly Detection for Securing In-Vehicle Networks

Network Anomaly Detection Using LSTM Based Autoencoder