Abstract:With the increasing dimensionality of network traffic, extracting effective traffic features and improving the identification accuracy of different intrusion traffic have become critical in intrusion detection systems (IDS). However, both unsupervised and semisupervised anomalous traffic detection methods suffer from the drawback of ignoring potential correlations between features, resulting in an analysis that is not an optimal set. Therefore, in order to extract more representative traffic features as well as to improve the accuracy of traffic identification, this paper proposes a feature dimensionality reduction method combining principal component analysis and Hotelling’s T2 and a multilayer convolutional bidirectional long short-term memory (MSC_BiLSTM) classifier model for network traffic intrusion detection. This method reduces the parameters and redundancy of the model by feature extraction and extracts the dependent features between the data by a bidirectional long short-term memory (BiLSTM) network, which fully considers the influence between the before and after features. The network traffic is first characteristically downscaled by principal component analysis (PCA), and then the downscaled principal components are used as input to Hotelling’s T2 to compare the differences between groups. For datasets with outliers, Hotelling’s T2 can help identify the groups where the outliers are located and quantitatively measure the extent of the outliers. Finally, a multilayer convolutional neural network and a BiLSTM network are used to extract the spatial and temporal features of network traffic data. The empirical consequences exhibit that the suggested approach in this manuscript attains superior outcomes in precision, recall and F1-score juxtaposed with the prevailing techniques. The results show that the intrusion detection accuracy, precision, and F1-score of the proposed MSC_BiLSTM model for the CIC-IDS 2017 dataset are 98.71%, 95.97%, and 90.22%.

TSIDS: Spatial–temporal Fusion Gating Multilayer Perceptron for Network Intrusion Detection

CBF-IDS: Addressing Class Imbalance Using CNN-BiLSTM with Focal Loss in Network Intrusion Detection System

Multi-agent based hybrid Intrusion detection system

Hybrid Intrusion Detection System for Complicated Network

An Industrial Intrusion Detection Method Based on Hybrid Convolutional Neural Networks with Improved TCN

An Intrusion Detection System Using a Deep Neural Network with Gated Recurrent Units.

A Hierarchical CNN-Transformer Model for Network Intrusion Detection

EESNN: Hybrid Deep Learning Empowered Spatial–Temporal Features for Network Intrusion Detection System

Fusion of transformer and ML-CNN-BiLSTM for network intrusion detection

Network Intrusion Traffic Detection Based on Feature Extraction

Intrusion Detection Model Using Temporal Convolutional Network Blend Into Attention Mechanism

HAST-IDS: Learning Hierarchical Spatial-Temporal Features Using Deep Neural Networks to Improve Intrusion Detection.

Intrusion Detection Using Temporal Convolutional Networks

STC‐IDS: Spatial–temporal correlation feature analyzing based intrusion detection system for intelligent connected vehicles

Deep Feature Extraction in Intrusion Detection System

Network Intrusion Detection Based on Hybrid Neural Network

3D-IDS: Doubly Disentangled Dynamic Intrusion Detection

XG-NID: Dual-Modality Network Intrusion Detection using a Heterogeneous Graph Neural Network and Large Language Model

A Multiscale Intrusion Detection System Based on Pyramid Depthwise Separable Convolution Neural Network

DL-IDS: Extracting Features Using CNN-LSTM Hybrid Network for Intrusion Detection System

Learning Spatial-Temporal Features of Fiber-Optical Data with Multi-Scale Double Dynamic Network for Human Intrusion Detection