Abstract:recent years, deep learning-based network intrusion detection systems (IDS) have shown impressive results in detecting attacks. However, most existing IDS can only recognize known attacks that were included in their training data. When faced with unknown attacks, these systems are often unable to take appropriate actions and incorrectly classify them into known categories, leading to reduced detection performance. Furthermore, as the number and types of network attacks continue to increase, it becomes challenging for these IDS to update their model parameters promptly and adapt to new attack scenarios. To address these issues, this paper introduces a dynamic intrusion detection system, Dynamic Unknown Attack Intrusion Detection System (DUA-IDS). This system aims to learn and detect unknown attacks effectively. DUA-IDS comprises three components: Feature Extractor: This component employs CNN and Transformer models to extract data features from various perspectives. Threshold-Based Classifier: The second part utilizes the nearest mean rule of samples to classify known and unknown attacks, enabling the distinction between them. Dynamic Learning Module: The third part incorporates data playback and knowledge distillation techniques to retain existing category knowledge while continuously learning new attack categories. To assess the effectiveness of DUA-IDS, this paper conducted experiments using the UNSW-NB15 public dataset. The experimental results show that DUA-IDS improves the classification accuracy of flow network data with unknown traffic attacks. Can accurately distinguish unknown traffic and correctly classify known traffic. When dynamically learning unknown traffic, the classification accuracy of previously learned known traffic is less affected. This indicates the advantages of DUA-IDS in detecting unknown attacks and learning new attack categories.

DEIDS: a Novel Intrusion Detection System for Industrial Control Systems

A Mixed Intrusion Detection System Utilizing K-means and Extreme Gradient Boosting

A Dynamic Intrusion Detection System Capable of Detecting Unknown Attacks

Intrusion Detection System for Industrial Control Systems Based on Imbalanced Data

ICS-IDS: Application of Big Data Analysis in AI-based Intrusion Detection Systems to Identify Cyberattacks in ICS Networks

Real-Time Intrusion Detection Based on Decision Fusion in Industrial Control Systems

Unknown Security Attack Detection of Industrial Control System by Deep Learning

Data-Driven Intrusion Detection for Intelligent Internet of Vehicles: A Deep Convolutional Neural Network-Based Method

An Intrusion Detection System Using a Deep Neural Network with Gated Recurrent Units.

Development of Intrusion Detection in Industrial Control Systems Based On Deep Learning

Intrusion Detection System Based on In-Depth Understandings of Industrial Control Logic

A Network Traffic Intrusion Detection Method for Industrial Control Systems Based on Deep Learning

DAICS: A Deep Learning Solution for Anomaly Detection in Industrial Control Systems

A Hierarchical Intrusion Detection System for Industrial Control Networks based on EtherNet/IP

A Lightweight and Intelligent Intrusion Detection System for Integrated Electronic Systems.

Hybrid Intrusion Detection System for Edge-Based IIoT Relying on Machine-Learning-Aided Detection

Deep Feature Extraction in Intrusion Detection System

Differential Evolution-Based Convolutional Neural Networks: An Automatic Architecture Design Method for Intrusion Detection in Industrial Control Systems

A Two Stage Intrusion Detection System for Industrial Control Networks Based on Ethernet/IP

Explainable and Data-Efficient Deep Learning for Enhanced Attack Detection in IIoT Ecosystem

A New Perspective Towards the Development of Robust Data-Driven Intrusion Detection for Industrial Control Systems