Intelligent Detection of Abnormal Traffic Based on SCN-BiLSTM
Source abstract
Abstract
To address the limitations of existing abnormal traffic detection methods, such as insufficient temporal and spatial feature extraction, high false positive rate (FPR), poor generalization, and class imbalance, this study proposed an intelligent detection method that combines a Stacked Convolutional Network (SCN), Bidirectional Long Short-Term Memory (BiLSTM) network, and Equalization Loss v2 (EQL v2). This method was divided into two components: a feature extraction model and a classification and detection model. First, SCN was constructed by combining a Convolutional Neural Network (CNN) with a Depthwise Separable Convolution (DSC) network to capture the abstract spatial features of traffic data. These features were then input into the BiLSTM to capture temporal dependencies. An attention mechanism was incorporated after SCN and BiLSTM to enhance the extraction of key spatiotemporal features. To address class imbalance, the classification detection model applied EQL v2 to adjust the weights of the minority classes, ensuring that they received equal focus during training. The experimental results indicated that the proposed method outperformed the existing methods in terms of accuracy, FPR, and F1-score and significantly improved the identification rate of minority classes.
Source: openalex_inverted_index · Quality: baseline
Research context
OpenAlex topics: Network Security and Intrusion Detection · Technology and Security Systems · Smart Grid and Power Systems
SciVX discovery tags are terminology-based. OpenAlex topics are source-provided classifications.
References (33)
Show source-provided references
1. A review of research on anomaly traffic detection for software-defined networks
2. Research on intrusion detection by fusing random forest and gradient boosting tree
3. Imbalanced data classification: a KNN and generative adversarial networks-based hybrid approach for intrusion detection10.1016/j.future.2022.01.026 ↗
4. A novel adaptive optimization framework for SVM hyper-parameters tuning in non-stationary environment: a case study on intrusion detection system10.1016/j.eswa.2022.119189 ↗
5. Intrusion detection classification algorithm based on fuzzy SVM model
6. Intrusion detection in cyber-physical environment using hybrid Naïve Bayes—Decision table and multi-objective evolutionary feature selection10.1016/j.comcom.2022.03.009 ↗
7. A hybrid interpretable deep structure based on adaptive neuro-fuzzy inference system, decision tree, and K-means for intrusion detection10.1038/s41598-022-23765-x ↗
8. A new DDoS attacks intrusion detection model based on deep learning for cybersecurity10.1016/j.cose.2022.102748 ↗
9. A systematic literature review of methods and datasets for anomaly-based network intrusion detection10.1016/j.cose.2022.102675 ↗
10. Explainable artificial intelligence for intrusion detection in IoT networks: a deep learning based approach10.1016/j.eswa.2023.121751 ↗
11. Deep learning based network intrusion detection system for resource-constrained environments
12. Equalization loss v2: a new gradient balance approach for long-tailed object detection
13. Machine learning approaches to network intrusion detection for contemporary internet traffic10.1007/s00607-021-01050-5 ↗
14. Anomaly-based intrusion detection system for IoT networks through deep learning model10.1016/j.compeleceng.2022.107810 ↗
15. End-to-end encrypted traffic classification with one-dimensional convolution neural networks
16. Generative adversarial networks: a survey toward private and secure applications
17. Li · Neural information processing. ICONIP 2017. Lecture notes in computer science · 2017 · 858
18. An improved convolutional neural network model for intrusion detection in networks
19. Optimization of intrusion detection using likely point PSO and enhanced LSTM-RNN hybrid technique in communication networks10.1109/ACCESS.2023.3240109 ↗
20. A bidirectional LSTM deep learning approach for intrusion detection10.1016/j.eswa.2021.115524 ↗
21. A network intrusion detection model based on BiLSTM with multi-head attention mechanism10.3390/electronics12194170 ↗
22. Network abnormal traffic detection framework based on deep reinforcement learning10.1109/MWC.011.2200320 ↗
23. Multi-objective evolving long-short term memory networks with attention for network intrusion detection10.1016/j.asoc.2023.110216 ↗
24. A deep learning approach for intrusion detection in Internet of Things using focal loss function10.1016/j.iot.2023.100699 ↗
25. Equalization loss for long-tailed object recognition
26. A novel hybrid model for intrusion detection systems in SDNs based on CNN and a new regularization technique10.1016/j.jnca.2021.103160 ↗
27. Long short-term memory10.1162/neco.1997.9.8.1735 ↗
28. A review on kdd cup99 and nsl-kdd dataset10.26483/ijarcs.v10i2.6395 ↗
29. Improving the classification effectiveness of intrusion detection by using improved conditional variational autoencoder and deep neural network10.3390/s19112528 ↗
30. Study on network intrusion detection method using discrete pre-processing method and convolution neural network10.1109/ACCESS.2021.3120839 ↗
31. I-SiamIDS: an improved Siam-IDS for handling class imbalance in network-based intrusion detection systems10.1007/s10489-020-01886-y ↗
32. Traffic anomaly detection method based on joint attention mechanism and one-dimensional convolutional neural network-bidirectional long and short-term memory network model
33. CANET: a hierarchical CNN-attention model for network intrusion detection10.1016/j.comcom.2023.04.018 ↗