Abstract:With the increasing dimensionality of network traffic, extracting effective traffic features and improving the identification accuracy of different intrusion traffic have become critical in intrusion detection systems (IDS). However, both unsupervised and semisupervised anomalous traffic detection methods suffer from the drawback of ignoring potential correlations between features, resulting in an analysis that is not an optimal set. Therefore, in order to extract more representative traffic features as well as to improve the accuracy of traffic identification, this paper proposes a feature dimensionality reduction method combining principal component analysis and Hotelling’s T2 and a multilayer convolutional bidirectional long short-term memory (MSC_BiLSTM) classifier model for network traffic intrusion detection. This method reduces the parameters and redundancy of the model by feature extraction and extracts the dependent features between the data by a bidirectional long short-term memory (BiLSTM) network, which fully considers the influence between the before and after features. The network traffic is first characteristically downscaled by principal component analysis (PCA), and then the downscaled principal components are used as input to Hotelling’s T2 to compare the differences between groups. For datasets with outliers, Hotelling’s T2 can help identify the groups where the outliers are located and quantitatively measure the extent of the outliers. Finally, a multilayer convolutional neural network and a BiLSTM network are used to extract the spatial and temporal features of network traffic data. The empirical consequences exhibit that the suggested approach in this manuscript attains superior outcomes in precision, recall and F1-score juxtaposed with the prevailing techniques. The results show that the intrusion detection accuracy, precision, and F1-score of the proposed MSC_BiLSTM model for the CIC-IDS 2017 dataset are 98.71%, 95.97%, and 90.22%.

A Fast Deep Learning Method for Network Intrusion Detection Without Manual Feature Extraction

A Method of Few-Shot Network Intrusion Detection Based on Meta-Learning Framework

A Deep Learning Model for Network Intrusion Detection with Imbalanced Data

A Novel Framework Design of Network Intrusion Detection Based on Machine Learning Techniques

Network Anomaly Intrusion Detection Based on Deep Learning Approach

A Deep Learning-Based Framework for Feature Extraction and Classification of Intrusion Detection in Networks

Efficient Deep CNN-BiLSTM Model for Network Intrusion Detection

Strengthening Network Security: Deep Learning Models for Intrusion Detection with Optimized Feature Subset and Effective Imbalance Handling

Network Intrusion Traffic Detection Based on Feature Extraction

An Intrusion Detection Model Based on Feature Reduction and Convolutional Neural Networks

A Novel Preprocessing Methodology for DNN-Based Intrusion Detection

A Intrusion Detection Model Based on Convolutional Neural Network and Feature Selection

DL-IDS: Extracting Features Using CNN-LSTM Hybrid Network for Intrusion Detection System

Network Intrusion Detection Method Combining CNN and BiLSTM in Cloud Computing Environment

A Network Traffic Intrusion Detection Method for Industrial Control Systems Based on Deep Learning

Intrusion Detection: A Deep Learning Approach

Network Intrusion Detection Methods Based on Deep Learning

Network intrusion detection: An optimized deep learning approach using big data analytics

Intrusion Detection Using Convolutional Neural Networks For Representation Learning

A Convolutional Neural Network with Hyperparameter Tuning for Packet Payload-Based Network Intrusion Detection

A Network Intrusion Detection Method for Various Information Systems Based on Federated and Deep Learning