Abstract:Network security is becoming more and more vital in our world as the internet permeates both the industry and our private life. Today, the means of production are networked and controlled by intelligent manufacturing process and the majority of the people are constantly connected to information systems by using mobile phones. Intrusion detection systems (IDS) are software components which detect attacks and malicious attempts to gain access to networks. How to design such systems efficiently is a question of both practical and research interest. We propose and approach based on cognitive computing using deep learning for this purpose. Our method has two main advantages: It is highly efficient and accurate, yet it is simple, builds on existing standard software, and can easily be implemented and enriched with domain knowledge by an expert from computer security with little background in machine learning. Furthermore, with the parallelism and big data support of the platform, our method will also scale well with the size of the dataset available for training. In deep learning, Convolutional neural network (CNNs) have successfully been applied to a variety of classification tasks in various fields. They are also available in easily accessible and scalable standard frameworks such as TensorFlow. In this paper, we present an approach to constructing an IDS based on CNN. Network traffic is presented based on features of TCP/IP connections and the approach is trained based on known attack signatures. We evaluate this approach using the widely available NSLKDD dataset. We are able to achieve the accuracy, precision, recall and $F_{1}$ -score of 98.92%, 99.82%, 92.34%, and 96.34%, respectively. Based on its simplicity and these surprisingly good performance results, we can conclude that our approach is highly suitable for constructing IDS.

Design of Network Traffic Anomaly Detection Algorithm Based on Deep Convolutional Neural Network

Abnormal Network Traffic Detection Algorithm Based on Improved Convolutional Neural Network

Network anomaly detection using deep learning techniques

Deep Learning-Based Anomaly Detection in Network Traffic for Cyber Threat Identification

A Network Traffic anomaly Detection method based on CNN and XGBoost

Convolutional neural network anomaly traffic detection based on DAPA

Network Anomaly Intrusion Detection Based on Deep Learning Approach

Spatio-Temporal Network Traffic Estimation and Anomaly Detection Based on Convolutional Neural Network in Vehicular Ad-Hoc Networks

Malicious Network Traffic Detection Based on Deep Neural Networks and Association Analysis

Research on Network Traffic Anomaly Detection Based on Deep Learning

Data-Driven Intrusion Detection for Intelligent Internet of Vehicles: A Deep Convolutional Neural Network-Based Method

Network Traffic Anomaly Detection Based on Spatiotemporal Feature Extraction and Channel Attention

Abnormal Traffic Detection Based on Attention and Big Step Convolution

Anomaly Network Traffic Detection Based on Deep Transfer Learning.

Web Traffic Anomaly Detection Using a Hybrid Spatio-temporal Neural Network

Network Intrusion Detection Based on Hybrid Neural Network

PCCN: Parallel Cross Convolutional Neural Network for Abnormal Network Traffic Flows Detection in Multi-Class Imbalanced Network Traffic Flows

Development and Optimization of Software Defined Networking Anomaly Detection Architecture by GRU-CNN under Deep Learning

Application of deep learning-based Intrusion Detection System (IDS) in network anomaly traffic detection

Intrusion Detection System Using Convolutional Neuronal Networks: A Cognitive Computing Approach for Anomaly Detection Based on Deep Learning.

An Abnormal Network Traffic Detection Algorithm Based on Big Data Analysis