Abstract:The intrusion detection system (IDS) is a promising technology for ensuring security against cyber-attacks in internet-of-things networks. In conventional IDS, anomaly detection and feature extraction are performed by two different models. In this paper, we propose a new integrated model based on deep autoencoder (AE) for anomaly detection and feature extraction. Firstly, AE is trained based on normal network traffic and used later to detect anomalies. Then, the trained AE model is employed again to extract useful low-dimensional features for anomalous data without the need for a feature extraction training stage, which is required by other methods such as principal components analysis (PCA) and linear discriminant analysis (LDA). After that, the extracted features are used by a machine learning (ML) or deep learning (DL) classifier to determine the type of attack (multi-classification). The performance of the proposed unified approach was evaluated on real IoT datasets called N-BaIoT and MQTTset, which contain normal and malicious network traffics. The proposed AE was compared with other popular anomaly detection techniques such as one-class support vector machine (OC-SVM) and isolation forest (iForest), in terms of performance metrics (accuracy, precision, recall, and F1-score), and execution time. AE was found to identify attacks better than OC-SVM and iForest with fast detection time. The proposed feature extraction method aims to reduce the computation complexity while maintaining the performance metrics of the multi-classifier models as much as possible compared to their counterparts. We tested the model with different ML/DL classifiers such as decision tree, random forest, deep neural network (DNN), conventional neural network (CNN), and hybrid CNN with long short-term memory (LSTM). The experiment results showed the capability of the proposed model to simultaneously detect anomalous events and reduce the dimensionality of the data.

A Cross-Domain Intrusion Detection Method Based on Nonlinear Augmented Explicit Features

A Mixed Intrusion Detection System Utilizing K-means and Extreme Gradient Boosting

Cross-Domain Industrial Intrusion Detection Deep Model Trained With Imbalanced Data

Effective Feature Extraction for Intrusion Detection System using Non-negative Matrix Factorization and Univariate analysis

Hybrid Intrusion Detection Model Based on a Designed Autoencoder.

Feature Extraction for Machine Learning-based Intrusion Detection in IoT Networks

A Hierarchical Hybrid Intrusion Detection Model for Industrial Internet of Things

An Enhanced Intrusion Detection System for IoT Networks Based on Deep Learning and Knowledge Graph

Deep Autoencoder-Based Integrated Model for Anomaly Detection and Efficient Feature Extraction in IoT Networks

Intrusion Detection System After Data Augmentation Schemes Based on the VAE and CVAE

An integrated intrusion detection framework based on subspace clustering and ensemble learning

Deep Feature Extraction in Intrusion Detection System

An Explainable Intrusion Detection System Based on Feature Importance

Explainable Deep Learning-Based Feature Selection and Intrusion Detection Method on the Internet of Things

A multiscale approach for network intrusion detection based on variance–covariance subspace distance and EQL v2

Causal Inference-Based Adversarial Domain Adaptation for Cross-Domain Industrial Intrusion Detection

A New Intrusion Detection Method Based on Adaptive Feature Extraction

Improved Intrusion Detection Based on Hybrid Deep Learning Models and Federated Learning

An Integrated Feature Extraction Based on Principal Components and Deep Auto Encoder with Extra Tree for Intrusion Detection Systems

An Intrusion Detection Model Based on Feature Reduction and Convolutional Neural Networks

EESNN: Hybrid Deep Learning Empowered Spatial–Temporal Features for Network Intrusion Detection System