Abstract:Due to the recent advances in the Internet and communication technologies, network systems and data have evolved rapidly. The emergence of new attacks jeopardizes network security and make it really challenging to detect intrusions. Multiple network attacks by an intruder are unavoidable. Our research targets the critical issue of class imbalance in intrusion detection, a reflection of the real-world scenario where legitimate network activities significantly out number malicious ones. This imbalance can adversely affect the learning process of predictive models, often resulting in high false-negative rates, a major concern in Intrusion Detection Systems (IDS). By focusing on datasets with this imbalance, we aim to develop and refine advanced algorithms and techniques, such as anomaly detection, cost-sensitive learning, and oversampling methods, to effectively handle such disparities. The primary goal is to create models that are highly sensitive to intrusions while minimizing false alarms, an essential aspect of effective IDS. This approach is not only practical for real-world applications but also enhances the theoretical understanding of managing class imbalance in machine learning. Our research, by addressing these significant challenges, is positioned to make substantial contributions to cybersecurity, providing valuable insights and applicable solutions in the fight against digital threats and ensuring robustness and relevance in IDS development. An intrusion detection system (IDS) checks network traffic for security, availability, and being non-shared. Despite the efforts of many researchers, contemporary IDSs still need to further improve detection accuracy, reduce false alarms, and detect new intrusions. The mean convolutional layer (MCL), feature-weighted attention (FWA) learning, a bidirectional long short-term memory (BILSTM) network, and the random forest algorithm are all parts of our unique hybrid model called MCL-FWA-BILSTM. The CNN-MCL layer for feature extraction receives data after preprocessing. After convolution, pooling, and flattening phases, feature vectors are obtained. The BI-LSTM and self-attention feature weights are used in the suggested method to mitigate the effects of class imbalance. The attention layer and the BI-LSTM features are concatenated to create mapped features before feeding them to the random forest algorithm for classification. Our methodology and model performance were validated using NSL-KDD and UNSW-NB-15, two widely available IDS datasets. The suggested model's accuracies on binary and multi-class classification tasks using the NSL-KDD dataset are 99.67% and 99.88%, respectively. The model's binary and multi-class classification accuracies on the UNSW-NB15 dataset are 99.56% and 99.45%, respectively. Further, we compared the suggested approach with other previous machine learning and deep learning models and found it to outperform them in detection rate, FPR, and F-score. For both binary and multiclass classifications, the proposed method reduces false positives while increasing the number of true positives. The model proficiently identifies diverse network intrusions on computer networks and accomplishes its intended purpose. The suggested model will be helpful in a variety of network security research fields and applications.

Deep learning enabled class imbalance with sand piper optimization based intrusion detection for secure cyber physical systems

An equilibrium optimizer with deep recurrent neural networks enabled intrusion detection in secure cyber-physical systems

Class imbalance data handling with optimal deep learning-based intrusion detection in IoT environment

IGAN-IDS: an Imbalanced Generative Adversarial Network Towards Intrusion Detection System in Ad-Hoc Networks

Election-based optimization algorithm with deep learning-enabled false data injection attack detection in cyber-physical systems

Sine-Cosine-Adopted African Vultures Optimization with Ensemble Autoencoder-Based Intrusion Detection for Cybersecurity in CPS Environment

Optimizing intrusion detection in industrial cyber-physical systems through transfer learning approaches

Optimizing IoT Intrusion Detection Using Balanced Class Distribution, Feature Selection, and Ensemble Machine Learning Techniques

Leveraging Gametic Heredity in Oversampling Techniques to Handle Class Imbalance for Efficient Cyberthreat Detection in IIoT

Intelligent approach to build a Deep Neural Network based IDS for cloud environment using combination of machine learning algorithms

An Ensemble Deep Learning-based Cyber-Attack Detection in Industrial Control System

A dual-stage deep learning model based on a sparse autoencoder and layered deep classifier for intrusion detection with imbalanced data

An Imbalanced Generative Adversarial Network-Based Approach for Network Intrusion Detection in an Imbalanced Dataset

Artificial intelligence based optimization with deep learning model for blockchain enabled intrusion detection in CPS environment

An Optimization-Based Feature Selection and Hybrid Spiking VGG 16 for Intrusion Detection in the CPS Perception Layer

A Hybrid Intrusion Detection Model Using EGA-PSO and Improved Random Forest Method

Generative AI and Cognitive Computing-Driven Intrusion Detection System in Industrial CPS

A practical intrusion detection system based on denoising autoencoder and LightGBM classifier with improved detection performance

A hybrid feature weighted attention based deep learning approach for an intrusion detection system using the random forest algorithm

Detecting Unbalanced Network Traffic Intrusions With Deep Learning

AI Driven False Data Injection Attack Recognition Approach for Cyber-Physical Systems in Smart Cities