Abstract:Intrusion Detection Systems (IDSs) play a crucial role in safeguarding network infrastructures from cyber threats and ensuring the integrity of highly sensitive data. Conventional IDS technologies, although successful in achieving high levels of accuracy, frequently encounter substantial model bias. This bias is primarily caused by imbalances in the data and the lack of relevance of certain features. This study aims to tackle these challenges by proposing an advanced machine learning (ML) based IDS that minimizes misclassification errors and corrects model bias. As a result, the predictive accuracy and generalizability of the IDS are significantly improved. The proposed system employs advanced feature selection techniques, such as Recursive Feature Elimination (RFE), sequential feature selection (SFS), and statistical feature selection, to refine the input feature set and minimize the impact of non-predictive attributes. In addition, this work incorporates data resampling methods such as Synthetic Minority Oversampling Technique and Edited Nearest Neighbor (SMOTE_ENN), Adaptive Synthetic Sampling (ADASYN), and Synthetic Minority Oversampling Technique–Tomek Links (SMOTE_Tomek) to address class imbalance and improve the accuracy of the model. The experimental results indicate that our proposed model, especially when utilizing the random forest (RF) algorithm, surpasses existing models regarding accuracy, precision, recall, and F Score across different data resampling methods. Using the ADASYN resampling method, the RF model achieves an accuracy of 99.9985% for botnet attacks and 99.9777% for Man-in-the-Middle (MITM) attacks, demonstrating the effectiveness of our approach in dealing with imbalanced data distributions. This research not only improves the abilities of IDS to identify botnet and MITM attacks but also provides a scalable and efficient solution that can be used in other areas where data imbalance is a recurring problem. This work has implications beyond IDS, offering valuable insights into using ML techniques in complex real-world scenarios.

FMSA: a Meta-Learning Framework-Based Fast Model Stealing Attack Technique Against Intelligent Network Intrusion Detection Systems

A Method of Few-Shot Network Intrusion Detection Based on Meta-Learning Framework

ML-Stealer: Stealing Prediction Functionality of Machine Learning Models with Mere Black-Box Access

Automatic Evasion of Machine Learning-Based Network Intrusion Detection Systems

Poisoning Machine Learning Based Wireless Idss Via Stealing Learning Model

MASiNet: Network Intrusion Detection for IoT Security Based on Meta-Learning Framework

Model Stealing Detection for IoT Services Based on Multi-Dimensional Features

I Know What You Trained Last Summer: A Survey on Stealing Machine Learning Models and Defences

Isolation and Induction: Training Robust Deep Neural Networks against Model Stealing Attacks

ES Attack: Model Stealing against Deep Neural Networks without Data Hurdles

LSSMSD: Defending Against Black-Box DNN Model Stealing Based on Localized Stochastic Sensitivity

DeepTheft: Stealing DNN Model Architectures through Power Side Channel

Model-agnostic generation-enhanced technology for few-shot intrusion detection

Data-Free Hard-Label Robustness Stealing Attack

Adversarial Attacks Against Network Intrusion Detection in IoT Systems

Making models more secure: An efficient model stealing detection method

Model Stealing Attack against Recommender System

Stealing Machine Learning Models via Prediction APIs

Deep Neural Networks based Meta-Learning for Network Intrusion Detection

Model for Peanuts: Hijacking ML Models without Training Access is Possible

A Machine Learning-Based Framework with Enhanced Feature Selection and Resampling for Improved Intrusion Detection