A Convolutional Neural Network with Hyperparameter Tuning for Packet Payload-Based Network Intrusion Detection

被引:2
作者
Boulaiche, Ammar [1 ]
Haddad, Sofiane [2 ]
Lemouari, Ali [1 ,3 ]
机构
[1] Univ Jijel, Fac Exact Sci & Comp Sci, LaRIA Lab, Jijel 18000, Algeria
[2] Univ Jijel, Fac Sci & Technol, RE Lab, Jijel 18000, Algeria
[3] Univ Tamanrasset, Fac Sci & Technol, Tamanrasset 11000, Algeria
来源
SYMMETRY-BASEL | 2024年 / 16卷 / 09期
关键词
network intrusion detection; multiclass classification; convolutional neural network; hyperparameter tuning; self-adaptive differential evolution; metaheuristic optimization;
D O I
10.3390/sym16091151
中图分类号
O [数理科学和化学]; P [天文学、地球科学]; Q [生物科学]; N [自然科学总论];
学科分类号
07 ; 0710 ; 09 ;
摘要
In the last few years, the use of convolutional neural networks (CNNs) in intrusion detection domains has attracted more and more attention. However, their results in this domain have not lived up to expectations compared to the results obtained in other domains, such as image classification and video analysis. This is mainly due to the datasets used, which contain preprocessed features that are not compatible with convolutional neural networks, as they do not allow a full exploit of all the information embedded in the original network traffic. With the aim of overcoming these issues, we propose in this paper a new efficient convolutional neural network model for network intrusion detection based on raw traffic data (pcap files) rather than preprocessed data stored in CSV files. The novelty of this paper lies in the proposal of a new method for adapting the raw network traffic data to the most suitable format for CNN models, which allows us to fully exploit the strengths of CNNs in terms of pattern recognition and spatial analysis, leading to more accurate and effective results. Additionally, to further improve its detection performance, the structure and hyperparameters of our proposed CNN-based model are automatically adjusted using the self-adaptive differential evolution (SADE) metaheuristic, in which symmetry plays an essential role in balancing the different phases of the algorithm, so that each phase can contribute in an equal and efficient way to finding optimal solutions. This helps to make the overall performance more robust and efficient when solving optimization problems. The experimental results on three datasets, KDD-99, UNSW-NB15, and CIC-IDS2017, show a strong symmetry between the frequency values implemented in the images built for each network traffic and the different attack classes. This was confirmed by a good predictive accuracy that goes well beyond similar competing models in the literature.
引用
收藏
页数:28
相关论文
共 45 条
[1]   Plant diseases recognition on images using convolutional neural networks: A systematic review [J].
Abade, Andre ;
Ferreira, Paulo Afonso ;
Vidal, Flavio de Barros .
COMPUTERS AND ELECTRONICS IN AGRICULTURE, 2021, 185
[2]  
Admass Wasyihun Sema, 2024, Cyber Security and Applications, V2, DOI 10.1016/j.csa.2023.100031
[3]  
Aggarwal C., 2023, Neural Networks and Deep Learning, P25, DOI [DOI 10.1007/978-3-031-29642-0, 10.1007/978- 3- 031- 29642- 0, 10.1007/978-3-031-29642-02]
[4]   Review Federated Learning for intrusion detection system: Concepts, challenges and future directions [J].
Agrawal, Shaashwat ;
Sarkar, Sagnik ;
Aouedi, Ons ;
Yenduri, Gokul ;
Piamrat, Kandaraj ;
Alazab, Mamoun ;
Bhattacharya, Sweta ;
Maddikunta, Praveen Kumar Reddy ;
Gadekallu, Thippa Reddy .
COMPUTER COMMUNICATIONS, 2022, 195 :346-361
[5]   NE-GConv: A lightweight node edge graph convolutional network for intrusion detection [J].
Altaf, Tanzeela ;
Wang, Xu ;
Ni, Wei ;
Liu, Ren Ping ;
Braun, Robin .
COMPUTERS & SECURITY, 2023, 130
[6]   ROULETTE: A neural attention multi-output model for explainable Network Intrusion Detection [J].
Andresini, Giuseppina ;
Appice, Annalisa ;
Caforio, Francesco Paolo ;
Malerba, Donato ;
Vessio, Gennaro .
EXPERT SYSTEMS WITH APPLICATIONS, 2022, 201
[7]   GAN augmentation to deal with imbalance in imaging-based intrusion detection [J].
Andresini, Giuseppina ;
Appice, Annalisa ;
De Rose, Luca ;
Malerba, Donato .
FUTURE GENERATION COMPUTER SYSTEMS-THE INTERNATIONAL JOURNAL OF ESCIENCE, 2021, 123 (123) :108-127
[8]   Anomaly-based intrusion detection system in the Internet of Things using a convolutional neural network and multi-objective enhanced Capuchin Search Algorithm [J].
Asgharzadeh, Hossein ;
Ghaffari, Ali ;
Masdari, Mohammad ;
Gharehchopogh, Farhad Soleimanian .
JOURNAL OF PARALLEL AND DISTRIBUTED COMPUTING, 2023, 175 :1-21
[9]   BLoCNet: a hybrid, dataset-independent intrusion detection system using deep learning [J].
Bowen, Brandon ;
Chennamaneni, Anitha ;
Goulart, Ana ;
Lin, Daisy .
INTERNATIONAL JOURNAL OF INFORMATION SECURITY, 2023, 22 (04) :893-917
[10]  
Crowley James L., 2023, Human-Centered Artificial Intelligence: Advanced Lectures. Lecture Notes in Computer Science, Lecture Notes in Artificial Intelligence (13500), P67, DOI 10.1007/978-3-031-24349-3_5