Abstract:Vision-based intrusion detection has many applications in life environments, e.g., security, intelligent monitoring, and autonomous driving. Previous works improve the performance of intrusion detection under unknown environments by introducing unsupervised domain adaptation (UDA) methods. However, these works do not fully fulfill the practical requirements due to the performance gap between UDA and fully supervised methods. To address the problem, we develop a new and vital active domain adaptation intrusion detection task, namely Ada-iD. Our aim is to query and annotate the most informative samples of the target domain at the lowest possible cost, striving for a balance between achieving high performance and keeping low annotation expenses. Specifically, we propose a multi-task joint active domain adaptation intrusion detection framework, namely ADAID-YOLO. It consists of a lower branch for detection and an upper branch for segmentation. Further, three effective strategies are designed to better achieve the Ada-iD task: 1) An efficient Dynamic Diffusion Pseudo-Labeling method (DDPL) is introduced to get Pseudo ground truth to help identify areas of uncertainty in segmentation. 2) An Enhanced Region Impurity and Prediction Uncertainty sampling strategy (Enhanced-RIPU) is proposed to better capture the uncertainty of the segmentation region. 3) A Multi-Element Joint sampling strategy (MEJ) is designed to calculate the uncertainty of the detection comprehensively. Finally, comprehensive experiments and comparisons are conducted on multiple dominant intrusion detection datasets. The results show that our method can outperform other classic and promising active domain adaptation methods and reach current SOTA performance, even surpassing the performance of UDA and full supervision on Normal-Foggy with only 0.1% and 10% data annotation, respectively. Available code: https://github.com/1012537710/Ada-iD.

Heterogeneous Domain Adaptation for IoT Intrusion Detection: A Geometric Graph Alignment Approach

A Domain Adaptive IoT Intrusion Detection Algorithm Based on GWR-GCN Feature Extraction and Conditional Domain Adversary

Incremental Update Intrusion Detection for Industry 5.0 Security: A Graph Attention Network-Enabled Approach

Scalable Graph-Aware Edge Representation Learning for Wireless IoT Intrusion Detection

Adaptive Bi-Recommendation and Self-Improving Network for Heterogeneous Domain Adaptation-Assisted IoT Intrusion Detection

AHDom: Algorithmically Generated Domain Detection Using Attribute Heterogeneous Graph Neural Network

Causal Inference-Based Adversarial Domain Adaptation for Cross-Domain Industrial Intrusion Detection

NIDS-FGPA: A federated learning network intrusion detection algorithm based on secure aggregation of gradient similarity models

Intelligent Intrusion Detection for Internet of Things Security: A Deep Convolutional Generative Adversarial Network-enabled Approach

A novel hierarchical attention-based triplet network with unsupervised domain adaptation for network intrusion detection

A Hierarchical Hybrid Intrusion Detection Model for Industrial Internet of Things

Graph Embedding-Based Heterogeneous Domain Adaptation with Domain-Invariant Feature Learning and Distributional Order Preserving.

Adaptive Intrusion Detection Via GA-GOGMM-based Pattern Learning with Fuzzy Rough Set-Based Attribute Selection

An Adaptive Growing Hierarchical Self Organizing Map for Network Intrusion Detection

Ada-iD: Active Domain Adaptation for Intrusion Detection

Joint Semantic Transfer Network for IoT Intrusion Detection

An improved intrusion detection method for IIoT using attention mechanisms, BiGRU, and Inception-CNN

Domain Adaptation for Anomaly Detection on Heterogeneous Graphs in E-Commerce

Cross-Domain Industrial Intrusion Detection Deep Model Trained With Imbalanced Data

Domain Adaptation with Geometrical Preservation and Distribution Alignment