Abstract:With the development of the Internet, the application of computer technology has rapidly become widespread, driving the progress of Internet of Things (IoT) technology. The attacks present on networks have become more complex and stealthy. However, traditional network intrusion detection systems with singular functions are no longer sufficient to meet current demands. While some machine learning-based network intrusion detection systems have emerged, traditional machine learning methods cannot effectively respond to the complex and dynamic nature of network attacks. Intrusion detection systems utilizing deep learning can better enhance detection capabilities through diverse data learning and training. To capture the topological relationships in network data, using graph neural networks (GNNs) is most suitable. Most existing GNNs for intrusion detection use multi-layer network training, which may lead to over-smoothing issues. Additionally, current intrusion detection solutions often lack efficiency. To mitigate the issues mentioned above, this paper proposes an E dge-featured M ulti-hop A ttention Graph Neural Network for I ntrusion D etection S ystem (EMA-IDS), aiming to improve detection performance by capturing more features from data flows. Our method enhances computational efficiency through attention propagation and integrates node and edge features, fully leveraging data characteristics. We carried out experiments on four public datasets, which are NF-CSE-CIC-IDS2018-v2, NF-UNSW-NB15-v2, NF-BoT-IoT, and NF-ToN-IoT. Compared with existing models, our method demonstrated superior performance.

EFS-DNN: An Ensemble Feature Selection-Based Deep Learning Approach to Network Intrusion Detection System

A feed forward deep neural network model using feature selection for cloud intrusion detection system

Ensemble classification for intrusion detection via feature extraction based on deep Learning

Filter-Based Ensemble Feature Selection and Deep Learning Model for Intrusion Detection in Cloud Computing

EESNN: Hybrid Deep Learning Empowered Spatial–Temporal Features for Network Intrusion Detection System

A Hybrid Spectral Clustering and Deep Neural Network Ensemble Algorithm for Intrusion Detection in Sensor Networks

Deep Feature Extraction in Intrusion Detection System

Intelligent Differential Evolution based Feature Selection with Deep Neural Network for Intrusion Detection in Wireless Sensor Networks

A Deep Learning-Based Framework for Feature Extraction and Classification of Intrusion Detection in Networks

Designing Ensemble Deep Learning Intrusion Detection System for DDoS attacks in Software Defined Networks

A Two-Stage Intrusion Detection Method Based on Light Gradient Boosting Machine and Autoencoder

The Use of Ensemble Models for Multiple Class and Binary Class Classification for Improving Intrusion Detection Systems

Combination of Feature Selection and Hybrid Classifier as to Network Intrusion Detection System Adopting FA, GWO, and BAT Optimizers

Edge-featured multi-hop attention graph neural network for intrusion detection system

Feature selection for intrusion detection systems

An Efficient Network Intrusion Detection Approach Based on Deep Learning

Novel Framework for an Intrusion Detection System Using Multiple Feature Selection Methods Based on Deep Learning

ID-RDRL: a deep reinforcement learning-based feature selection intrusion detection model

A tree-based stacking ensemble technique with feature selection for network intrusion detection

Towards Data-Driven Network Intrusion Detection Systems: Features Dimensionality Reduction and Machine Learning

DL-IDS: Extracting Features Using CNN-LSTM Hybrid Network for Intrusion Detection System