journal article·2024Open access

Strengthening Network Security: Deep Learning Models for Intrusion Detection with Optimized Feature Subset and Effective Imbalance Handling

Bayi Xu, Lei Sun, Xiuqing Mao, Chengwei Liu, Zhiyi Ding

Computers, Materials & Continua· Volume 78· Issue 2

Abstract

In recent years, frequent network attacks have highlighted the importance of efficient detection methods for ensuring cyberspace security. This paper presents a novel intrusion detection system consisting of a data preprocessing stage and a deep learning model for accurately identifying network attacks. We have proposed four deep neural network models, which are constructed using architectures such as Convolutional Neural Networks (CNN), Bi-directional Long Short-Term Memory (BiLSTM), Bidirectional Gate Recurrent Unit (BiGRU), and Attention mechanism. These models have been evaluated for their detection performance on the NSL-KDD dataset.To enhance the compatibility between the data and the models, we apply various preprocessing techniques and employ the particle swarm optimization algorithm to perform feature selection on the NSL-KDD dataset, resulting in an optimized feature subset. Moreover, we address class imbalance in the dataset using focal loss. Finally, we employ the BO-TPE algorithm to optimize the hyperparameters of the four models, maximizing their detection performance. The test results demonstrate that the proposed model is capable of extracting the spatiotemporal features of network traffic data effectively. In binary and multiclass experiments, it achieved accuracy rates of 0.999158 and 0.999091, respectively, surpassing other state-of-the-art methods.
Source: openalex_inverted_index · Quality: baseline

Research context

OpenAlex topics: Network Security and Intrusion Detection · Internet Traffic Analysis and Secure E-voting · Anomaly Detection Techniques and Applications

SciVX discovery tags are terminology-based. OpenAlex topics are source-provided classifications.

References (53)

Show source-provided references
1. A survey of CNN-based network intrusion detection10.3390/app12168162 ↗
2. IDS-attention: An efficient algorithm for intrusion detection systems using attention mechanism10.1186/s40537-021-00544-5 ↗
3. Kumar · Managing Cyber Threats: Issues, Approaches, and Challenges · 200510.1007/b104908 ↗
4. IGRF-RFE: A hybrid feature selection method for MLP-based network intrusion detection on UNSW-NB15 dataset10.1186/s40537-023-00694-8 ↗
5. An intrusion detection system based on a simplified residual network10.3390/info10110356 ↗
6. An intrusion-detection model10.1109/TSE.1987.232894 ↗
7. Singh · Eng. Appl. Artif. Intell. · 2023 · 126 · 10713710.1016/j.engappai.2023.107137 ↗
8. Optimal feature selection for machine learning based intrusion detection system by exploiting attribute dependence
9. An effective genetic algorithm-based feature selection method for intrusion detection systems10.1016/j.cose.2021.102448 ↗
10. A survey on feature selection methods10.1016/j.compeleceng.2013.11.024 ↗
11. Extreme minority class detection in imbalanced data for network intrusion10.1016/j.cose.2022.102940 ↗
12. CANET: A hierarchical CNN-attention model for network intrusion detection10.1016/j.comcom.2023.04.018 ↗
13. Deep learning approach for intelligent intrusion detection system10.1109/ACCESS.2019.2895334 ↗
14. A network intrusion detection system based on convolutional neural network10.3233/JIFS-179833 ↗
15. An optimized CNN-based intrusion detection system for reducing risks in smart farming10.1016/j.iot.2023.100709 ↗
16. A novel metaheuristics with deep learning enabled intrusion detection system for secured smart environment
17. Hybrid machine learning approach based intrusion detection in cloud: A metaheuristic assisted model10.3233/MGS-220360 ↗
18. Network intrusion detection using improved genetic k-means algorithm
19. Performance analysis of intrusion detection systems using a feature selection method on the UNSW-NB15 dataset10.1186/s40537-020-00379-6 ↗
20. Intrusion detection system with recursive feature elimination by using random forest and deep learning classifier
21. Intrusion detection system combined enhanced random forest with SMOTE algorithm10.1186/s13634-022-00871-6 ↗
22. A residual learning-based network intrusion detection system10.1155/2021/5593435 ↗
23. Imbalanced data classification: A KNN and generative adversarial networks-based hybrid approach for intrusion detection10.1016/j.future.2022.01.026 ↗
24. Intrusion detection systems using long short-term memory (LSTM)10.1186/s40537-021-00448-4 ↗
25. Intrusion detection model using machine learning algorithm on big data environment10.1186/s40537-018-0145-4 ↗
26. A new DDoS attacks intrusion detection model based on deep learning for cybersecurity10.1016/j.cose.2022.102748 ↗
27. MICQ-IPSO: An effective two-stage hybrid feature selection algorithm for high-dimensional data10.1016/j.neucom.2022.05.048 ↗
28. Particle swarm optimization
29. Whale optimization approaches for wrapper feature selection10.1016/j.asoc.2017.11.006 ↗
31. A discrete binary version of the particle swarm algorithm
32. Long short-term memory10.1162/neco.1997.9.8.1735 ↗
33. J. Chung, C. Gulcehre, K. Cho, and Y. Bengio, “Empirical evaluation of gated recurrent neural networks on sequence modeling,” arXiv preprint arXiv:1412.3555, 2014.
34. Feature fusion text classification model combining CNN and BiGRU with multi-attention mechanism10.3390/fi11110237 ↗
35. Chorowski · NIPS 2015 · 2015 · 577
36. Attention is all you need
37. D. Bahdanau, K. Cho, and Y. Bengio, “Neural machine translation by jointly learning to align and translate,” arXiv preprint arXiv:1409.047, 2014.
38. Batch normalization: Accelerating deep network training by reducing internal covariate shift
39. Mask R-CNN
40. Algorithms for hyper-parameter optimization
41. On hyperparameter optimization of machine learning algorithms: Theory and practice10.1016/j.neucom.2020.07.061 ↗
42. A detailed analysis of the KDD CUP 99 data set
43. A new evolutionary neural networks based on intrusion detection systems using multiverse optimization10.1007/s10489-017-1085-y ↗
44. Intrusion detection system using hybrid classifiers with meta-heuristic algorithms for the optimization and feature selection by genetic algorithm10.1016/j.compeleceng.2022.108383 ↗
45. Hybrid optimization and deep learning based intrusion detection system10.1016/j.compeleceng.2022.107876 ↗
46. An effective intrusion detection approach using SVM with naïve Bayes feature embedding10.1016/j.cose.2020.102158 ↗
47. Efficient deep CNN-BiLSTM model for network intrusion detection
48. Intelligent intrusion detection method of industrial Internet of things based on CNN-BiLSTM
49. A deep learning approach for intrusion detection in Internet of Things using focal loss function10.1016/j.iot.2023.100699 ↗
50. Network intrusion detection model based on CNN and GRU10.3390/app12094184 ↗
51. An effective intrusion detection framework based on MCLP/SVM optimized by time-varying chaos particle swarm optimization10.1016/j.neucom.2016.03.031 ↗
52. I-SiamIDS: An improved Siam-IDS for handling class imbalance in network-based intrusion detection systems10.1007/s10489-020-01886-y ↗
53. DMAIDPS: A distributed multi-agent intrusion detection and prevention system for cloud IoT environments10.1007/s10586-022-03621-3 ↗