Abstract:As Internet of Things devices become prevalent, using intrusion detection to protect IoT from malicious intrusions is of vital importance. However, the data scarcity of IoT hinders the effectiveness of traditional intrusion detection methods. To tackle this issue, in this paper, we propose the Adaptive Bi-Recommendation and Self-Improving Network (ABRSI) based on unsupervised heterogeneous domain adaptation (HDA). The ABRSI transfers enrich intrusion knowledge from a data-rich network intrusion source domain to facilitate effective intrusion detection for data-scarce IoT target domains. The ABRSI achieves fine-grained intrusion knowledge transfer via adaptive bi-recommendation matching. Matching the bi-recommendation interests of two recommender systems and the alignment of intrusion categories in the shared feature space form a mutual-benefit loop. Besides, the ABRSI uses a self-improving mechanism, autonomously improving the intrusion knowledge transfer from four ways. A hard pseudo label voting mechanism jointly considers recommender system decision and label relationship information to promote more accurate hard pseudo label assignment. To promote diversity and target data participation during intrusion knowledge transfer, target instances failing to be assigned with a hard pseudo label will be assigned with a probabilistic soft pseudo label, forming a hybrid pseudo-labelling strategy. Meanwhile, the ABRSI also makes soft pseudo-labels globally diverse and individually certain. Finally, an error knowledge learning mechanism is utilised to adversarially exploit factors that causes detection ambiguity and learns through both current and previous error knowledge, preventing error knowledge forgetfulness. Holistically, these mechanisms form the ABRSI model that boosts IoT intrusion detection accuracy via HDA-assisted intrusion knowledge transfer. Comprehensive experiments on several intrusion datasets demonstrate the state-of-the-art performance of the ABRSI method, outperforming its counterparts by 9.2%, and also verify the effectiveness of ABRSI constituting components and ABRSI’s overall efficiency.

Causal Inference-Based Adversarial Domain Adaptation for Cross-Domain Industrial Intrusion Detection

Cross-Domain Industrial Intrusion Detection Deep Model Trained With Imbalanced Data

Cross-domain Anomaly Detection for Power Industrial Control System

Domain Adaptation for Infrared-Radar Cross-Scene Multimodal Detection

CBF-IDS: Addressing Class Imbalance Using CNN-BiLSTM with Focal Loss in Network Intrusion Detection System

Real-Time Intrusion Detection Based on Decision Fusion in Industrial Control Systems

Transfer Adversarial Attacks Across Industrial Intelligent Systems.

Intrusion Detection System for Industrial Control Systems Based on Imbalanced Data

ICS-IDS: Application of Big Data Analysis in AI-based Intrusion Detection Systems to Identify Cyberattacks in ICS Networks

Adversarial Domain Adaptation with Classifier Alignment for Cross-Domain Intelligent Fault Diagnosis of Multiple Source Domains

Adversarial Weight Prediction Networks for Defense of Industrial FDC Systems

Unknown Security Attack Detection of Industrial Control System by Deep Learning

Heterogeneous Domain Adaptation for IoT Intrusion Detection: A Geometric Graph Alignment Approach

Generating Adversarial Examples Against Machine Learning-Based Intrusion Detector in Industrial Control Systems

A Self-supervised Adversarial Learning Approach for Network Intrusion Detection System.

One-Dimensional Convolutional Wasserstein Generative Adversarial Network Based Intrusion Detection Method for Industrial Control Systems

Knowledge-inspired Subdomain Adaptation for Cross-Domain Knowledge Transfer

Research on Data Imbalance in Intrusion Detection Using CGAN.

Adaptive Bi-Recommendation and Self-Improving Network for Heterogeneous Domain Adaptation-Assisted IoT Intrusion Detection

A Semantic Domain Adaption Framework for Cross-Domain Infrared Small Target Detection

Cross-Domain Anomaly Detection Using Unsupervised Representation Learning and Domain Adaption