Enhancing network intrusion detection systems with combined network and host traffic features using deep learning: deep learning and IoT perspective

被引:2
作者
Alars, Estabraq Saleem Abduljabbar [1 ]
Kurnaz, Sefer [1 ]
机构
[1] Altinbas Univ, Dept Elect & Comp Engn, TR-34000 Istanbul, Turkiye
关键词
Deep learning; Network intrusion detection system; Cybersecurity; Feature extraction; Convolutional neural network; Network traffic analysis; Host traffic features;
D O I
10.1007/s10791-024-09480-3
中图分类号
TP [自动化技术、计算机技术];
学科分类号
0812 ;
摘要
Network security is a key concern in today's linked world as cyber threats grow more sophisticated and ubiquitous. Traditional Network Intrusion Detection Systems (NIDS) generally fall short owing to their dependence on predetermined signatures and restricted detection scope, exposing substantial gaps in efficiently recognizing new and unanticipated intrusions. This research tackles these difficulties by merging network and host traffic data with sophisticated deep learning algorithms to boost NIDS performance. Utilizing the Network Intrusion Detection dataset, which comprises multiple intrusion scenarios replicated in a military network context, our technique involves painstaking data collection, preprocessing, and feature extraction. We employed a convolutional neural network (CNN) to assess these data, applying rigorous feature selection and dimensionality reduction to enhance model performance. The findings reveal that our deep learning-based NIDS achieves an amazing detection accuracy of 98.5%, exceeding current approaches and successfully resolving real-world cybersecurity problems. This complete approach not only develops NIDS technology but also provides a practical solution for boosting network security across many applications, therefore contributing to the development of intrusion detection systems.
引用
收藏
页数:19
相关论文
共 63 条
[1]   RETRACTED: Towards an efficient model for network intrusion detection system (IDS): systematic literature review (Retracted article. See vol. 31, pg. 4415, 2025) [J].
Abdulganiyu, Oluwadamilare Harazeem ;
Tchakoucht, Taha Ait ;
Saheed, Yakub Kayode .
WIRELESS NETWORKS, 2024, 30 (01) :453-482
[2]   A systematic literature review for network intrusion detection system (IDS) [J].
Abdulganiyu, Oluwadamilare Harazeem ;
Tchakoucht, Taha Ait ;
Saheed, Yakub Kayode .
INTERNATIONAL JOURNAL OF INFORMATION SECURITY, 2023, 22 (05) :1125-1162
[3]  
Abed RA, 2024, Meas: Sensors, V35, DOI [10.1016/j.measen.2024.101299, DOI 10.1016/J.MEASEN.2024.101299]
[4]   Cost-effective detection system of cross-site scripting attacks using hybrid learning approach [J].
Abu Al-Haija, Qasem .
RESULTS IN ENGINEERING, 2023, 19
[5]   An intelligent identification and classification system for malicious uniform resource locators (URLs) [J].
Abu Al-Haija, Qasem ;
Al-Fayoumi, Mustafa .
NEURAL COMPUTING & APPLICATIONS, 2023, 35 (23) :16995-17011
[6]   Network intrusion detection system: A systematic study of machine learning and deep learning approaches [J].
Ahmad, Zeeshan ;
Shahid Khan, Adnan ;
Wai Shiang, Cheah ;
Abdullah, Johari ;
Ahmad, Farhan .
TRANSACTIONS ON EMERGING TELECOMMUNICATIONS TECHNOLOGIES, 2021, 32 (01)
[7]  
Al-Haija QA., 2021, Selected papers from the 12th international networking conference. INC 2020. lecture notes in networks and systems
[8]   Adversarial machine learning in Network Intrusion Detection Systems [J].
Alhajjar, Elie ;
Maxwell, Paul ;
Bastian, Nathaniel .
EXPERT SYSTEMS WITH APPLICATIONS, 2021, 186
[9]  
Alotibi Gaseb, 2015, P INT C INFORM WARFA, P1
[10]   An Intrusion Detection and Classification System for IoT Traffic with Improved Data Engineering [J].
Alsulami, Abdulaziz A. ;
Abu Al-Haija, Qasem ;
Tayeb, Ahmad ;
Alqahtani, Ali .
APPLIED SCIENCES-BASEL, 2022, 12 (23)