Abstract:In the dynamic field of the internet in modern life,networks are increasingly vulnerable to a diverse range of cyberattacks.Conventional intrusion detection systems based on machine learning techniques require a large number of samples for training.However,in some scenarios,only a limited number of malicious samples can be collected.To address the issue of insufficient training samples and unbalanced sample classes for intrusion detection system in real network environments,this paper proposes an intrusion detection method named DeepInsight-transfer learning-convolutional neural network(DI-TL-CNN),which is based on DI and TL.First,the DI method is used to convert the intrusion dataset into an image form suitable for CNN model input.The DI method can transform text while maintaining the semantic relationships between data points,thereby providing high-quality images.In this step,we map the 1D feature vector representation of the input data onto the 2D image representation using T-SNE and construct 2D grayscale images.In the second step,we train and optimize the VGG16 model through TL and fine-tuning,enhancing the model's adaptability and performance.We propose six TL schemes by freezing and fine-tuning the parameters of different modules in the CNN model to enhance intrusion detection performance.In the TL process,the VGG16 model,pretrained on the ImageNet dataset,demonstrates promising results for generic image classification tasks.The bottom layers of CNN models often learn basic feature patterns that are applicable to various tasks,while the features acquired by the top layers of the model are specific to the target domain intrusion dataset.Fine-tuning allows the model to adjust the pretrained architecture's higher-order features to better match the targeted dataset.During the training process,the bottom layers of the pretrained architecture are frozen,whereas the top layers are unfrozen for fine-tuning.The optimal intrusion detection model is determined through a comparison of the performance of the six TL schemes.Finally,the correctness and effectiveness of the proposed DI-TL-CNN method are validated on a dataset with insufficient training samples,using metrics such as accuracy,precision,recall,and F1-score.In the experiments,compared with existing state-of-the-art models for intrusion detection,the proposed method considerably enhances accuracy in the detection of network traffic data.The experimental results show that the DI-TL-CNN method is suitable for intrusion detection with small samples and unbalanced data,demonstrating the good application prospects of the method in complex networks.

A Few-Shot Learning-Based Siamese Capsule Network for Intrusion Detection with Imbalanced Training Data

A Method of Few-Shot Network Intrusion Detection Based on Meta-Learning Framework

A Dynamic Intrusion Detection System Capable of Detecting Unknown Attacks

Few-Shot network intrusion detection based on prototypical capsule network with attention mechanism

CBF-IDS: Addressing Class Imbalance Using CNN-BiLSTM with Focal Loss in Network Intrusion Detection System

A few-shot deep learning approach for improved intrusion detection

A Deep Learning Model for Network Intrusion Detection with Imbalanced Data

Host-Based Intrusion Detection Model Using Siamese Network

Network Anomaly Intrusion Detection Based on Deep Learning Approach

Few-Shot Learning-Based Network Intrusion Detection Through an Enhanced Parallelized Triplet Network

Siamese Neural Network Based Few-Shot Learning for Anomaly Detection in Industrial Cyber-Physical Systems

Semi-supervised Few-shot Network Intrusion Detection Based on Meta-learning

Network Intrusion Detection Based on Dense Dilated Convolutions and Attention Mechanism.

CSK-CNN: Network Intrusion Detection Model Based on Two-Layer Convolution Neural Network for Handling Imbalanced Dataset

Learning to Detect: A Data-driven Approach for Network Intrusion Detection

A Few-Shot Class-Incremental Learning Method for Network Intrusion Detection

Strengthening Network Security: Deep Learning Models for Intrusion Detection with Optimized Feature Subset and Effective Imbalance Handling

Unsupervised deep learning approach for network intrusion detection combining convolutional autoencoder and one-class SVM

Visual Intrusion Detection Based On CBAM-Capsule Networks

Network Intrusion Detection Technology Based on DeepInsight and Transfer Learning

Model-agnostic generation-enhanced technology for few-shot intrusion detection