journal article·2023-02-21Open access

Deep Learning-Based Network Intrusion Detection Using Multiple Image Transformers

Taehoon Kim, Wooguil Pak

Applied Sciences· Volume 13· Issue 5

Abstract

The development of computer vision-based deep learning models for accurate two-dimensional (2D) image classification has enabled us to surpass existing machine learning-based classifiers and human classification capabilities. Recently, steady efforts have been made to apply these sophisticated vision-based deep learning models as network intrusion detection domains, and various experimental results have confirmed their applicability and limitations. In this paper, we present an optimized method for processing network intrusion detection system (NIDS) datasets using vision-based deep learning models by further expanding existing studies to overcome these limitations. In the proposed method, the NIDS dataset can further enhance the performance of existing deep-learning-based intrusion detection by converting the dataset into 2D images through various image transformers and then integrating into three-channel RGB color images, unlike the existing method. Various performance evaluations confirm that the proposed method can significantly improve intrusion detection performance over the recent method using grayscale images, and existing NIDSs without the use of images. As network intrusion is increasingly evolving in complexity and variety, we anticipate that the intrusion detection algorithm outlined in this study will facilitate network security.
Source: crossref · Quality: baseline

Research context

OpenAlex topics: Network Security and Intrusion Detection · Internet Traffic Analysis and Secure E-voting · Anomaly Detection Techniques and Applications

SciVX discovery tags are terminology-based. OpenAlex topics are source-provided classifications.

Affiliations

Department of Information and Communication Engineering, Yeungnam University, Gyeongsan 38541, Republic of Korea

Funding

National Research Foundation of Korea

References (38)

Show source-provided references
1. Faizal, M.A., Mohd Zaki, M., Shahrin, S., Robiah, Y., Siti Rahayu, S., and Nazrulazhar, B. (2009). Threshold Verification Technique for Network Intrusion Detection System. arXiv.
2. Chunyue, Z., Yun, L., and Hongke, Z. (2006, January 5–8). A Pattern matching based Network Intrusion Detection System. Proceedings of the 2006 9th International Conference on Control, Automation, Robotics and Vision, Singapore.10.1109/ICARCV.2006.345459 ↗
3. Bilge, L., and Dumitras, T. (2012, January 16–18). Before we knew it: An empirical study of zero-day attacks in the real world. Proceedings of the 2012 ACM Conference on Computer and Communications Security, Raleigh, NC, USA.10.1145/2382196.2382284 ↗
4. Kruegel, C., and Toth, T. (2003, January 8–10). Using decision trees to improve signature-based intrusion detection. Proceedings of the 2003 International Workshop on Recent Advances in Intrusion Detection, Pittsburgh, PA, USA.10.1007/978-3-540-45248-5_10 ↗
5. Sahu, S., and Mehtre, B.M. (2015, January 10–13). Network intrusion detection system using J48 Decision Tree. Proceedings of the 2015 International Conference on Advances in Computing, Communications and Informatics (ICACCI), Kochi, India.10.1109/ICACCI.2015.7275914 ↗
6. Ho, T.K. (1995, January 14–16). Random Decision Forests. Proceedings of the 2015 3rd International Conference on Document Analysis and Recognition, Montreal, QC, Canada.
7. The Random Subspace Method for Constructing Decision Forests10.1109/34.709601 ↗
8. A decision-theoretic [sic] generalization of on-line learning and an application to boosting10.1007/3-540-59119-2_166 ↗
9. Deep Learning Approach Combining Sparse Autoencoder with SVM for Network Intrusion Detection10.1109/ACCESS.2018.2869577 ↗
10. Gu, J., Zhu, M., Zhou, Z., Zhang, F., Lin, Z., Zhang, Q., and Breternitz, M. (2014, January 25–26). Implementation and evaluation of deep neural networks (DNN) on mainstream heterogeneous systems. Proceedings of the 2014 5th Asia-Pacific Workshop on Systems (APSys ’14), Beijing, China.10.1145/2637166.2637229 ↗
11. Principal component analysis: A review and recent developments10.1098/rsta.2015.0202 ↗
12. Visualizing Data Using t-SNE
13. DeepInsight: A methodology to transform a non-image data to an image for convolution neural network architecture10.1038/s41598-019-47765-6 ↗
14. Application of the residue number system to reduce hardware costs of the convolutional neural network implementation10.1016/j.matcom.2020.04.031 ↗
15. Nonlinear Component Analysis as a Kernel Eigenvalue Problem10.1162/089976698300017467 ↗
16. McInnes, L., Healy, J., and Melville, J. (2018). UMAP: Uniform Manifold Approximation and Projection for Dimension Reduction. arXiv.10.21105/joss.00861 ↗
17. Multivariable Functional Interpolation and Adaptive Networks
18. Danger Theory Based Risk Evaluation Model for Smurf Attacks10.4028/www.scientific.net/KEM.467-469.515 ↗
19. Erikson, J. (1997). Hacking the Art of Exploitation, NoStarch Press. [2nd ed.].
20. Dharmapurikarg, S., Krishnamurthy, P., Sproull, T., and Lockwood, J. (2003, January 20–22). Deep packet inspection using parallel bloom filters. Proceedings of the 2003 11th Symposium on High Performance Interconnects, Stanford, CA, USA.
21. (2023, February 17). Symantec Internet Security Threat Report: Trends for July–December 2007. Symantec Corporation. Available online: https://docs.broadcom.com/doc/istr-08-april-exec-sum-en.
22. Efficient string matching: An aid to bibliographic search10.1145/360825.360855 ↗
23. Malek, Z.S., Trivedi, B., and Shah, A. (2020, January 27–28). User behavior Pattern -Signature based Intrusion Detection. Proceedings of the 2020 Fourth World Conference on Smart Trends in Systems, Security and Sustainability (WorldS4), London, UK.10.1109/WorldS450073.2020.9210368 ↗
24. An Effective Two-Step Intrusion Detection Approach Based on Binary Classification and k-NN10.1109/ACCESS.2017.2787719 ↗
25. Tavallaee, M., Bagheri, E., Lu, W., and Ghorbani, A. (2009, January 8–10). A Detailed Analysis of the KDD CUP 99 Data Set. Proceedings of the 2009 IEEE Symposium on Computational Intelligence for Security and Defense Applications (CISDA), Ottawa, ON, Canada.10.1109/CISDA.2009.5356528 ↗
26. Ghorbani, Toward developing a systematic approach to generate benchmark datasets for intrusion detection10.1016/j.cose.2011.12.012 ↗
27. (2023, January 13). Description of Kyoto University Benchmark Data. Available online: https://www.takakura.com/Kyoto_data/BenchmarkData-Description-v5.pdf.
28. Quinlan, R. (2014). C4. 5: Programs for Machine Learning, Elsevier.
29. Quinlan, R. (2023, February 17). Data Mining Tools See5 and c5. Available online: https://www.researchgate.net/publication/307174962_Data_Mining_Tools_See5_and_C50.
30. Lu, C. (2022, January 22–24). Research on the technical application of artificial intelligence in network intrusion detection system. Proceedings of the 2022 International Conference on Electronics and Devices, Computational Science (ICEDCS), Marseille, France.10.1109/ICEDCS57360.2022.00031 ↗
31. Wang, J.D., He, A., Castiglione, B., Gupta, B., Karuppiah, M., and Wu, L. (2022). PCNNCEC: Efficient and Privacy-Preserving Convolutional Neural Network Inference Based on Cloud-Edge-Client Collaboration. IEEE Trans. Netw. Sci. Eng.10.1109/TNSE.2022.3177755 ↗
32. A dual-LSTM framework combining change point detection and remaining useful life prediction10.1016/j.ress.2020.107257 ↗
33. Li, X.Y., Tang, R., and Song, W. (2022, January 4–6). Intrusion Detection System Using Improved Convolution Neural Network. Proceedings of the 2022 11th International Conference of Information and Communication Technology (ICTech), Wuhan, China.10.1109/ICTech55460.2022.00028 ↗
34. HAST-IDS: Learning hierarchical spatial-temporal features using deep neural networks to improve intrusion detection10.1109/ACCESS.2017.2780250 ↗
35. Agarap, A.F. (2018). Deep learning using rectified linear units (relu). arXiv.
36. Khan, A., and Cotton, C. (2021, January 27–29). Detecting Attacks on IoT Devices using Featureless 1D-CNN. Proceedings of the 2021 IEEE International Conference on Cyber Security and Resilience (CSR), Rhodes, Greece.10.1109/CSR51186.2021.9527910 ↗
37. Navya, V.K., Adithi, J., Rudrawal, D., Tailor, H., and James, N. (2021, January 8–9). Intrusion Detection System using Deep Neural Networks (DNN). Proceedings of the 2021 International Conference on Advancements in Electrical, Electronics, Communication, Computing and Automation (ICAECA), Coimbatore, India.10.1109/ICAECA52838.2021.9675513 ↗
38. Soheily-Khah, S., Marteau, P., and Béchet, N. (2018, January 8–10). Intrusion Detection in Network Systems Through Hybrid Supervised and Unsupervised Machine Learning Process: A Case Study on the ISCX Dataset. Proceedings of the 1st International Conference on Data Intelligence and Security (ICDIS), South Padre Island, TX, USA.10.1109/ICDIS.2018.00043 ↗