Abstract:With the increasing dimensionality of network traffic, extracting effective traffic features and improving the identification accuracy of different intrusion traffic have become critical in intrusion detection systems (IDS). However, both unsupervised and semisupervised anomalous traffic detection methods suffer from the drawback of ignoring potential correlations between features, resulting in an analysis that is not an optimal set. Therefore, in order to extract more representative traffic features as well as to improve the accuracy of traffic identification, this paper proposes a feature dimensionality reduction method combining principal component analysis and Hotelling’s T2 and a multilayer convolutional bidirectional long short-term memory (MSC_BiLSTM) classifier model for network traffic intrusion detection. This method reduces the parameters and redundancy of the model by feature extraction and extracts the dependent features between the data by a bidirectional long short-term memory (BiLSTM) network, which fully considers the influence between the before and after features. The network traffic is first characteristically downscaled by principal component analysis (PCA), and then the downscaled principal components are used as input to Hotelling’s T2 to compare the differences between groups. For datasets with outliers, Hotelling’s T2 can help identify the groups where the outliers are located and quantitatively measure the extent of the outliers. Finally, a multilayer convolutional neural network and a BiLSTM network are used to extract the spatial and temporal features of network traffic data. The empirical consequences exhibit that the suggested approach in this manuscript attains superior outcomes in precision, recall and F1-score juxtaposed with the prevailing techniques. The results show that the intrusion detection accuracy, precision, and F1-score of the proposed MSC_BiLSTM model for the CIC-IDS 2017 dataset are 98.71%, 95.97%, and 90.22%.

An Intrusion Detection Method Based on Stacked Sparse Autoencoder and Improved Gaussian Mixture Model

A Mixed Intrusion Detection System Utilizing K-means and Extreme Gradient Boosting

Self-Organizing Map assisted Deep Autoencoding Gaussian Mixture Model for Intrusion Detection

A Two-Stage Intrusion Detection Method Based on Light Gradient Boosting Machine and Autoencoder

Intrusion Detection System Based on One-Class Support Vector Machine and Gaussian Mixture Model

Network Intrusion Detection Method Based on Stacked Denoising Sparse Autoencoder and Extreme Learning Machine

A novel multi-module integrated intrusion detection system for high-dimensional imbalanced data

Network Intrusion Detection Through Stacking Dilated Convolutional Autoencoders

An Efficient Communication Intrusion Detection Scheme in AMI Combining Feature Dimensionality Reduction and Improved LSTM

STG2P: A Two-Stage Pipeline Model for Intrusion Detection Based on Improved LightGBM and K-means

Cloud Intrusion Detection Method Based on Stacked Contractive Auto-Encoder and Support Vector Machine

An Efficient Intrusion Detection Method Based on LightGBM and Autoencoder

An Effective Intrusion Detection Framework Based on SVM with Feature Augmentation

Autoencoder-based Unsupervised Intrusion Detection using Multi-Scale Convolutional Recurrent Networks

Network Intrusion Detection Based on Contractive Sparse Stacked Denoising Autoencoder.

A Deep Learning Model for Network Intrusion Detection with Imbalanced Data

A Simple Recurrent Unit Model Based Intrusion Detection System with DCGAN

Hybrid Intrusion Detection Model Based on a Designed Autoencoder.

Big data analysis and distributed deep learning for next-generation intrusion detection system optimization

Network Intrusion Traffic Detection Based on Feature Extraction

Stacked Autoencoder-based Intrusion Detection System to Combat Financial Fraudulent