Abstract:With an increase in the number and types of network attacks, traditional firewalls and data encryption methods can no longer meet the needs of current network security. As a result, intrusion detection systems have been proposed to deal with network threats. The current mainstream intrusion detection algorithms are aided with machine learning but have problems of low detection rates and the need for extensive feature engineering. To address the issue of low detection accuracy, this paper proposes a model for traffic anomaly detection named a deep learning model for network intrusion detection (DLNID), which combines an attention mechanism and the bidirectional long short-term memory (Bi-LSTM) network, first extracting sequence features of data traffic through a convolutional neural network (CNN) network, then reassigning the weights of each channel through the attention mechanism, and finally using Bi-LSTM to learn the network of sequence features. In intrusion detection public data sets, there are serious imbalance data generally. To address data imbalance issues, this paper employs the method of adaptive synthetic sampling (ADASYN) for sample expansion of minority class samples, to eventually form a relatively symmetric dataset, and uses a modified stacked autoencoder for data dimensionality reduction with the objective of enhancing information fusion. DLNID is an end-to-end model, so it does not need to undergo the process of manual feature extraction. After being tested on the public benchmark dataset on network intrusion detection NSL-KDD, experimental results show that the accuracy and F1 score of this model are better than those of other comparison methods, reaching 90.73% and 89.65%, respectively.

Few-Shot network intrusion detection based on prototypical capsule network with attention mechanism

A Method of Few-Shot Network Intrusion Detection Based on Meta-Learning Framework

A Few-Shot Learning-Based Siamese Capsule Network for Intrusion Detection with Imbalanced Training Data

CBF-IDS: Addressing Class Imbalance Using CNN-BiLSTM with Focal Loss in Network Intrusion Detection System

Attentive Prototype Few-Shot Learning with Capsule Network-Based Embedding

Few-Shot Learning-Based Network Intrusion Detection Through an Enhanced Parallelized Triplet Network

A few-shot deep learning approach for improved intrusion detection

Intrusion detection for capsule networks based on dual routing mechanism

Model-agnostic generation-enhanced technology for few-shot intrusion detection

Network Intrusion Detection Method Based on CNN-BiLSTM-Attention Model

A Deep Learning Model for Network Intrusion Detection with Imbalanced Data

Few-Shot Network Intrusion Detection Using Discriminative Representation Learning with Supervised Autoencoder

Cross Attention Network for Few-shot Classification

A Biological Immunity-Based Neuro Prototype for Few-Shot Anomaly Detection with Character Embedding

Visual Intrusion Detection Based On CBAM-Capsule Networks

SPN: A Method of Few-Shot Traffic Classification With Out-of-Distribution Detection Based on Siamese Prototypical Network

Imbalanced data classification: A KNN and generative adversarial networks-based hybrid approach for intrusion detection

Spatial Attention Network for Few-Shot Learning

Dynamic Prototype Network based on Sample Adaptation for Few-Shot Malware Detection

Prototypical Network With Residual Capsule for Few-Shot Hyperspectral Image Classification

A Network Intrusion Detection Model Based on BiLSTM with Multi-Head Attention Mechanism