Abstract:Intrusion detection systems (IDS) monitor network activity to detect unusual patterns indicative of security breaches. However, many existing IDS solutions struggle with accurately identifying attacks within packet capture (PCAP) files. To address this limitation, a deep learning‐based dual IDS model is proposed. Utilizing the Cyber Intelligence Centre‐Distributed Denial of Service Attack 2019 dataset, this model begins by extracting features and attributes from PCAP files. Experimental results demonstrate that this model achieves 98.18% accuracy and 98.73% precision in classification tasks, significantly outperforming existing approaches. These findings highlight the effectiveness of the proposed system in enhancing intrusion detection capabilities. The rise of suspicious activities in network communication, driven by increased internet accessibility, necessitates the development of advanced intrusion detection systems (IDS). Existing IDS solutions often exhibit poor performance in detecting suspicious activity and fail to identify various attack types within packet capture (PCAP) files, which monitor network traffic. This paper proposes a deep learning‐based dual IDS model designed to address these issues. The process begins with utilizing the CSE‐CIC‐IDS2019 dataset to extract features from PCAP files. Suspicious activities are detected using the Exponential Geometric‐Gaussian Error Linear Units‐Gated Recurrent Unit (EG‐GELU‐GRU) method. Normal data undergoes further feature extraction and preprocessing through Log ZScore‐Jacosine Density‐Based Spatial Clustering of Applications with Noise (LZ‐JC‐DBSCAN). Feature selection is optimized using the Entropy Pearson R Correlation‐Red Panda optimization algorithm. Suspicious files are flagged, while load balancing is performed on normal data. Attack detection is achieved through word embedding with the Glorot Kaufman‐bidirectional encoder representations from transformers technique and classification via the EG‐GELU‐GRU model. Attacked packets are blocked, and the method is reapplied for attack‐type classification. Experimental results using Python demonstrate the model's superior performance, achieving 98.18% accuracy and 98.73% precision, surpassing existing approaches and significantly enhancing intrusion detection capabilities.

Research on Network Intrusion Detection Based on Incremental Extreme Learning Machine and Adaptive Principal Component Analysis

Research on Network Intrusion Detection Based on Incremental Extreme Learning Machine and Adaptive Principal Component Analysis

A Mixed Intrusion Detection System Utilizing K-means and Extreme Gradient Boosting

A Novel Intrusion Detection System Based on an Optimal Hybrid Kernel Extreme Learning Machine

Network Intrusion Detection Based on Extreme Learning Machine and Principal Component Analysis

An Intrusion Detection Model Using Extreme Learning Machine

Implement an Intrusion Detection System Utilizing Machine Learning and Principal Component Analysis

Analysis of Extreme Learning Machines (ELMs) for intelligent intrusion detection systems: A survey

Intrusion Detection Based on Self-adaptive Differential Evolutionary Extreme Learning Machine

Intrusion Detection Methods Based on Integrated Deep Learning Model.

An adaptive network intrusion detection method based on PCA and support vector machines

Improving the Performance of Machine Learning-Based Network Intrusion Detection Systems on the UNSW-NB15 Dataset

Network Intrusion Detection Method Based on Stacked Denoising Sparse Autoencoder and Extreme Learning Machine

An Integrated Feature Extraction Based on Principal Components and Deep Auto Encoder with Extra Tree for Intrusion Detection Systems

Adaptive Intrusion Detection Based on Machine Learning : Feature Extraction , Classifier Construction and Sequential Pattern Prediction

Performance Comparison of Support Vector Machine, Random Forest, and Extreme Learning Machine for Intrusion Detection

An innovative model for an enhanced dual intrusion detection system using LZ‐JC‐DBSCAN, EPRC‐RPOA and EG‐GELU‐GRU

An Incremental Majority Voting Approach for Intrusion Detection System Based on Machine Learning

A Generalized and Robust Nonlinear Approach based on Machine Learning for Intrusion Detection

Learning to Detect: A Data-driven Approach for Network Intrusion Detection

ANID-SEoKELM: Adaptive Network Intrusion Detection Based on Selective Ensemble of Kernel ELMs with Random Features