journal article·2022-08-10Open access

A One-Dimensional Convolutional Neural Network (1D-CNN) Based Deep Learning System for Network Intrusion Detection

Emad Ul Haq Qazi, Abdulrazaq Almorjan, Tanveer Zia

Applied Sciences· Volume 12· Issue 16

Abstract

The connectivity of devices through the internet plays a remarkable role in our daily lives. Many network-based applications are utilized in different domains, e.g., health care, smart environments, and businesses. These applications offer a wide range of services and provide services to large groups. Therefore, the safety of network-based applications has always been an area of research interest for academia and industry alike. The evolution of deep learning has enabled us to explore new areas of research. Hackers make use of the vulnerabilities in networks and attempt to gain access to confidential systems and information. This information and access to systems can be very harmful and portray losses beyond comprehension. Therefore, detection of these network intrusions is of the utmost importance. Deep learning based techniques require minimal inputs while exploring every possible feature set in the network. Thus, in this paper, we present a one-dimensional convolutional neural network-based deep learning architecture for the detection of network intrusions. In this research, we detect four different types of network intrusions, i.e., DoS Hulk, DDoS, and DoS Goldeneye which belong to the active attack category, and PortScan, which falls in the passive attack category. For this purpose, we used the benchmark CICIDS2017 dataset for conducting the experiments and achieved an accuracy of 98.96% as demonstrated in the experimental results.
Source: crossref · Quality: baseline

Research context

OpenAlex topics: Network Security and Intrusion Detection · Advanced Malware Detection Techniques · Internet Traffic Analysis and Secure E-voting

SciVX discovery tags are terminology-based. OpenAlex topics are source-provided classifications.

Affiliations

Center of Excellence in Cybercrimes and Digital Forensics (CoECDF), Naif Arab University for Security Sciences (NAUSS), Riyadh 14812, Saudi Arabia

Funding

Security Research Center at Naif Arab University for Security Sciences

References (46)

Show source-provided references
1. Use of K-nearest neighbor classifier for intrusion detection10.1016/S0167-4048(02)00514-X ↗
2. A novel hybrid intrusion detection method integrating anomaly detection with misuse detection10.1016/j.eswa.2013.08.066 ↗
3. PCA filtering and probabilistic SOM for network intrusion detection10.1016/j.neucom.2014.09.083 ↗
4. Sen, R., Chattopadhyay, M., and Sen, N. (2015, January 4–6). An efficient approach to develop an intrusion detection system based on multi-layer backpropagation neural network algorithm: IDS using BPNN algorithm. Proceedings of the 2015 ACM SIGMIS Conference on Computers and People Research, Newport Beach, CA, USA.10.1145/2751957.2751979 ↗
5. A network intrusion detection system based on a hidden Naïve Bayes multiclass classifer10.1016/j.eswa.2012.07.009 ↗
6. Feature selection by multi-objective optimisation: Application to network anomaly detection by hierarchical self-organising maps10.1016/j.knosys.2014.08.013 ↗
7. Performance comparison of support vector machine, random forest, and extreme learning machine for intrusion detection10.1109/ACCESS.2018.2841987 ↗
8. Soheily-Khah, S., Marteau, P.F., and Béchet, N. (2018, January 8–10). Intrusion detection in network systems through hybrid supervised and unsupervised machine learning process: A case study on the ISCX dataset. Proceedings of the 2018 1st International Conference on Data Intelligence and Security (ICDIS), South Padre Island, TX, USA.10.1109/ICDIS.2018.00043 ↗
9. Network Intrusion Detection: Based on Deep Hierarchical Network and Original Flow Data10.1109/ACCESS.2019.2905041 ↗
10. Internet traffic classification by aggregating correlated naive bayes predictions10.1109/TIFS.2012.2223675 ↗
11. Cisco Systems (2022, June 05). Cisco IOS NetFlow. Available online: www.cisco.com/go/netflow.
12. An overview of ip flow-based intrusion detection10.1109/SURV.2010.032210.00054 ↗
13. Analysis of KDD CUP 99 dataset using clustering-based data mining10.14257/ijdta.2013.6.5.03 ↗
14. Analysis of KDD dataset attributes-class wise for intrusion detection10.1016/j.procs.2015.07.490 ↗
15. Intrusion detection system for wireless mesh network using multiple support vector machine classifiers with genetic-algorithm-based feature selection10.1016/j.cose.2018.04.010 ↗
16. Deepcoin: A novel deep learning and blockchain-based energy exchange framework for smart grids10.1109/TEM.2019.2922936 ↗
17. Hybrid feature selection for supporting lightweight intrusion detection systems10.1088/1742-6596/887/1/012031 ↗
18. Constructing important features from massive network traffic for lightweight intrusion detection10.1049/iet-ifs.2014.0353 ↗
19. A hybrid intrusion detection system design for computer network security10.1016/j.compeleceng.2008.12.005 ↗
20. Distributed intrusion detection system for cloud environments based on data mining techniques10.1016/j.procs.2018.01.095 ↗
21. Radford, B.J., Richardson, B.D., and Davis, S.E. (2018). Sequence aggregation rules for anomaly detection in computer network traffic. arXiv.
22. Islam, F.B., Akter, R., Kim, D.S., and Lee, J.M. (2020, January 14–17). Deep Learning Based Network Intrusion Detection for Industrial Internet of Things. Proceedings of the Korea Telecommunications Society Conference, Online.
23. Hanif, S., Ilyas, T., and Zeeshan, M. (2019, January 6–9). Intrusion Detection in IoT Using Artificial Neural Networks on UNSW-15 Dataset. Proceedings of the 2019 IEEE 16th International Conference on Smart Cities: Improving Quality of Life Using ICT & IoT and AI (HONET-ICT), Charlotte, NC, USA.10.1109/HONET.2019.8908122 ↗
24. Peng, Y., Su, J., Shi, X., and Zhao, B. (2019, January 12–14). Evaluating Deep Learning Based Network Intrusion Detection System in Adversarial Environment. Proceedings of the 2019 IEEE 9th International Conference on Electronics Information and Emergency Communication (ICEIEC), Beijing, China.10.1109/ICEIEC.2019.8784514 ↗
25. A new approach to intrusion detection using artificial neural networks and fuzzy clustering10.1016/j.eswa.2010.02.102 ↗
26. Chen, L., Kuang, X., Xu, A., Suo, S., and Yang, Y. (2020, January 19–20). A Novel Network Intrusion Detection System Based on CNN. Proceedings of the 2020 Eighth International Conference on Advanced Cloud and Big Data (CBD), Taiyuan, China.10.1109/CBD51900.2020.00051 ↗
27. Jamil, F., and Kim, D. (2021). An Ensemble of Prediction and Learning Mechanism for Improving Accuracy of Anomaly Detection in Network Intrusion Environments. Sustainability, 13.10.3390/su131810057 ↗
28. Adaptive scheme for ANOVA models10.9734/jamcs/2020/v35i430266 ↗
29. An empirical comparison of the ANOVA F-test, normal scores test and Kruskal–Wallis test under violation of assumptions10.1177/001316447403400406 ↗
30. Azizjon, M., Jumabek, A., and Kim, W. (2020, January 19–21). 1D CNN based network intrusion detection with normalization on imbalanced data. Proceedings of the 2020 International Conference on Artificial Intelligence in Information and Communication (ICAIIC), Fukuoka, Japan.10.1109/ICAIIC48513.2020.9064976 ↗
31. Vinayakumar, R., Soman, K.P., and Poornachandran, P. (2017, January 13–16). Applying convolutional neural network for network intrusion detection. Proceedings of the 2017 International Conference on Advances in Computing, Communications and Informatics (ICACCI), Udupi, India.10.1109/ICACCI.2017.8126009 ↗
32. A detailed analysis of CICIDS2017 dataset for designing Intrusion Detection Systems
33. Zhang, J., and Zulkernine, M. (2006, January 11–15). Anomaly based network intrusion detection with unsupervised outlier detection. Proceedings of the 2006 IEEE International Conference on Communications, Istanbul, Turkey.10.1109/ICC.2006.255127 ↗
34. Roopak, M., Tian, G.Y., and Chambers, J. (2019, January 7–9). Deep learning models for cyber security in IoT networks. Proceedings of the 2019 IEEE 9th Annual Computing and Communication Workshop and Conference (CCWC), Las Vegas, NV, USA.10.1109/CCWC.2019.8666588 ↗
35. Cyber threat detection based on artificial neural networks using event profiles10.1109/ACCESS.2019.2953095 ↗
36. Atefi, K., Hashim, H., and Khodadadi, T. (2020, January 28–29). A hybrid anomaly classification with deep learning (DL) and binary algorithms (BA) as optimizer in the intrusion detection system (IDS). Proceedings of the 2020 16th IEEE International Colloquium on SIGNAL Processing & Its Applications (CSPA), Langkawi, Malaysia.10.1109/CSPA48992.2020.9068725 ↗
37. Enhanced network intrusion detection using deep convolutional neural networks
38. Hyperband tuned deep neural network with well posed stacked sparse autoencoder for detection of DDoS attacks in cloud10.1109/ACCESS.2020.3028690 ↗
39. Deepdetect: Detection of distributed denial of service attacks using deep learning10.1093/comjnl/bxz064 ↗
40. Albelwi, S.A. (2022, January 25–27). An Intrusion Detection System for Identifying Simultaneous Attacks using Multi-Task Learning and Deep Learning. Proceedings of the 2022 2nd International Conference on Computing and Information Technology (ICCIT), Tabuk, Saudi Arabia.10.1109/ICCIT52419.2022.9711630 ↗
41. Sivamohan, S., Sridhar, S.S., and Krishnaveni, S. (2021, January 25–27). An Effective Recurrent Neural Network (RNN) based Intrusion Detection via Bi-directional Long Short-Term Memory. Proceedings of the 2021 International Conference on Intelligent Technologies (CONIT), Karnataka, India.10.1109/CONIT51480.2021.9498552 ↗
42. Nayyar, S., Arora, S., and Singh, M. (2020, January 28–30). Recurrent neural network based intrusion detection system. Proceedings of the 2020 International Conference on Communication and Signal Processing (ICCSP), Chennai, India.10.1109/ICCSP48568.2020.9182099 ↗
43. Network traffic classifier with convolutional and recurrent neural networks for Internet of Things10.1109/ACCESS.2017.2747560 ↗
44. Teyou, D., Kamdem, G., and Ziazet, J. (2019). Convolutional neural network for intrusion detection system in cyber physical systems. arXiv.
45. Ayed, M.A., and Talhi, C. (November, January 31). Federated learning for anomaly-based intrusion detection. Proceedings of the 2021 International Symposium on Networks, Computers and Communications (ISNCC), Dubai, United Arab Emirates.10.1109/ISNCC52172.2021.9615816 ↗
46. Toward generating a new intrusion detection dataset and intrusion traffic characterization