Abstract:The work develops a network threat detection system, AI@NTDS, that uses the behavioral features of attackers and intelligent techniques. The proposed AI@NTDS system combines data analysis, feature extraction, and feature evaluation to construct a detection model, which supports a more straightforward strategy by which the operating system or its operators can defend against network attacks. The Linux system interaction information of SSH (Secure Shell) and Telnet are obtained from the Cowrie Honeypot and labeled according to Enterprise Tactics of MITRE ATT&CK to ensure dataset credibility. The proposed AI@NTDS system has three levels, depending on the attacker's attacks and the user's risk of damage. Fifty-two features are used to detect the network threat level. The features contain message-based features for all kinds of Linux operating instructions, host-based features for all types of information in the network connection process, and geography-based features are related to the attacker's location. AI-based algorithms LightGBM, Random Forest and the K-NN algorithm are used to verify the identification of the custom features. Finally, the detection model that is trained using the best combination of features is used to predict the test dataset. The accuracy of the proposed AI@NTDS system reaches 99%, 95.66%, and 94.08% with the LightGBM, Random Forest, and K-NN algorithms, respectively. The mutual dependencies of features and network threats are evaluated. Results of a performance analysis reveal that the proposed AI@NTDS system has an accuracy of 99.20% and an F1-score of 99.80%. It is superior to existing detection mechanisms, which it outperforms by 4% and 1% i- accuracy and F1-score, respectively.

Data-driven network layer security detection model and simulation for the Internet of Things based on an artificial immune system

Multi-agent based hybrid Intrusion detection system

Exploring the Potential of the Innate Immune System for Computers Network Security

An AI-Powered Network Threat Detection System

AI Enhanced Automatic Response System for Resisting Network Threats.

Intrusion Detection And Simulation For High-Speed Networks

A novel immune detector training method for network anomaly detection

A Network Function Virtualization System for Detecting Malware in Large IoT Based Networks

Hybrid Intrusion Detection System for Internet of Things (IoT)

Artificial Immune Detection for Network Intrusion Data Based on Quantitative Matching Method

Plant and Salamander Inspired Network Attack Detection and Data Recovery Model

Artificial immunity based distributed and fast anomaly detection for Industrial Internet of Things

A Novel Internet of Things (IoT) Web Attack Detection Architecture Based on the Combination of Symbolism and Connectionism AI

Challenges of Malware Detection in the IoT and a Review of Artificial Immune System Approaches

An Artificial Immune Infrastructure For Network-Attached Data Acquisition System

A hybrid artificial immune system and Self Organising Map for network intrusion detection

Network Security Evaluation Model Based on Cloud Computing.

A hybrid deep learning-based intrusion detection system for IoT networks

Wormhole attack detection and mitigation model for Internet of Things and WSN using machine learning

A cutting-edge intelligent cyber model for intrusion detection in IoT environments leveraging future generations networks

Artificial Immune System Based Intrusion Detection In A Distributed Hierarchical Network Architecture Of Smart Grid