Abstract:With the increasing dimensionality of network traffic, extracting effective traffic features and improving the identification accuracy of different intrusion traffic have become critical in intrusion detection systems (IDS). However, both unsupervised and semisupervised anomalous traffic detection methods suffer from the drawback of ignoring potential correlations between features, resulting in an analysis that is not an optimal set. Therefore, in order to extract more representative traffic features as well as to improve the accuracy of traffic identification, this paper proposes a feature dimensionality reduction method combining principal component analysis and Hotelling’s T2 and a multilayer convolutional bidirectional long short-term memory (MSC_BiLSTM) classifier model for network traffic intrusion detection. This method reduces the parameters and redundancy of the model by feature extraction and extracts the dependent features between the data by a bidirectional long short-term memory (BiLSTM) network, which fully considers the influence between the before and after features. The network traffic is first characteristically downscaled by principal component analysis (PCA), and then the downscaled principal components are used as input to Hotelling’s T2 to compare the differences between groups. For datasets with outliers, Hotelling’s T2 can help identify the groups where the outliers are located and quantitatively measure the extent of the outliers. Finally, a multilayer convolutional neural network and a BiLSTM network are used to extract the spatial and temporal features of network traffic data. The empirical consequences exhibit that the suggested approach in this manuscript attains superior outcomes in precision, recall and F1-score juxtaposed with the prevailing techniques. The results show that the intrusion detection accuracy, precision, and F1-score of the proposed MSC_BiLSTM model for the CIC-IDS 2017 dataset are 98.71%, 95.97%, and 90.22%.

Intrusion detection algorithm based on improved principal component analysis

Intrusion Detection Feature Selection Method Based on Principal Component Analysis

A Novel Intrusion Detection Method Based on Principle Component Analysis in Computer Security

An Intrusion Detection Method Based on Principal Component Analysis and Decision Tree

An adaptive network intrusion detection method based on PCA and support vector machines

Implement an Intrusion Detection System Utilizing Machine Learning and Principal Component Analysis

Research on 3D Object Recognition Algorithm Based on PCA and Moment Invariant

A Hierarchical Intrusion Detection Model Based on the PCA Neural Networks

Network Intrusion Detection Based on Extreme Learning Machine and Principal Component Analysis

Application and Performance Analysis of Data Preprocessing for Intrusion Detection System.

Network Intrusion Traffic Detection Based on Feature Extraction

Automatic incident detection algorithm based on principal component classifier

An Improved SVM Algorithm in Intrusion Detection Application

A BOOSTING APPROACH FOR INTRUSION DETECTION

The abnormal traffic detection scheme based on PCA and SSH

Research on Network Intrusion Detection Based on Incremental Extreme Learning Machine and Adaptive Principal Component Analysis

A New Intrusion Detection Feature Extraction Method Based on Complex Network Theory

Intrusion detection using PCASOM neural networks

An efficient anomaly detection algorithm for vector-based intrusion detection systems

Processing of Massive Audit Data Streams for Real-Time Anomaly Intrusion Detection