Abstract:This paper aims to provide a solution for malicious network traffic detection and categorization. Remote attacks on computer systems are becoming more common and more dangerous nowadays. This is due to several factors, some of which are as follows: first of all, the usage of computer networks and network infrastructure overall is on the rise, with tools such as messengers, email, and so on. Second, alongside increased usage, the amount of sensitive information being transmitted over networks has also grown. Third, the usage of computer networks for complex systems, such as grid and cloud computing, as well as IoT and “smart” locations (e.g., “smart city”) has also seen an increase. Detecting malicious network traffic is the first step in defending against a remote attack. Historically, this was handled by a variety of algorithms, including machine learning algorithms such as clustering. However, these algorithms require a large amount of sample data to be effective against a given attack. This means that defending against zero‐day attacks or attacks with high variance in input data proves difficult for such algorithms. In this paper, we propose a semi‐supervised generative adversarial network (GAN) to train a discriminator model to categorize malicious traffic as well as identify malicious and non‐malicious traffic. The proposed solution consists of a GAN generator that creates tabular data representing network traffic from a remote attack and a classifier deep neural network for said traffic. The main goal is to achieve accurate categorization of malicious traffic with a few labeled examples. This can also, in theory, improve classification accuracy compared to fully supervised models. It may also improve the model’s performance against completely new types of attacks. The resulting model shows a prediction accuracy of 91 %, which is lower than a conventional deep learning model; however, this accuracy is achieved with a small sample of data (under 1000 labeled examples). As such, the results of this research may be used to improve computer system security, for example, by using dynamic firewall rule adjustments based on the results of incoming traffic classification. The proposed model was implemented and tested in the Python programming language and the TensorFlow framework. The dataset used for testing is the NSL‐KDD dataset.

AI on the Defensive and Offensive: Securing Multi-Environment Networks from AI Agents

Securing Multi-Environment Networks Using Versatile Synthetic Data Augmentation Technique and Machine Learning Algorithms

Enhancing In-Vehicle Network Security Against AI-Generated Cyberattacks Using Machine Learning

Malicious Traffic Detection in Multi-Environment Networks Using Novel S-DATE and PSO-D-SEM Approaches

Malicious Traffic Detection in Multi-Environment Network Using Dual-Data Trained LightGBM Approach

RobEns: Robust Ensemble Adversarial Machine Learning Framework for Securing IoT Traffic

Multi‐aspects AI‐based modeling and adversarial learning for cybersecurity intelligence and robustness: A comprehensive overview

METHODS AND MEANS TO IMPROVE THE EFFICIENCY OF NETWORK TRAFFIC SECURITY MONITORING BASED ON ARTIFICIAL INTELLIGENCE

FAMTDS: A Novel MFO-based Fully Automated Malicious Traffic Detection System for Multi-Environment Networks

An Enhanced AI-Based Network Intrusion Detection System Using Generative Adversarial Networks

In-Vehicle Networks Security Using Transfer Learning Approach Against AI-Generated Cyberattacks

A Survey on the Application of Generative Adversarial Networks in Cybersecurity: Prospective, Direction and Open Research Scopes

Security and Privacy for Artificial Intelligence: Opportunities and Challenges

PANACEA: a neural model ensemble for cyber-threat detection

Cyber Security Meets Artificial Intelligence: a Survey

Employing Deep Ensemble Learning for Improving the Security of Computer Networks against Adversarial Attacks

CyberAIBot: Artificial Intelligence in an Intrusion Detection System for CyberSecurity in the IoT

Attack-Aware IoT Network Traffic Routing Leveraging Ensemble Learning

An Ensemble Learning-Based Cooperative Defensive Architecture Against Adversarial Attacks

Multi-task learning for IoT traffic classification: A comparative analysis of deep autoencoders

Model-agnostic generation-enhanced technology for few-shot intrusion detection