Synthetic attack data generation model applying generative adversarial network for intrusion detection

被引:33
作者
Kumar, Vikash [1 ,2 ]
Sinha, Ditipriya [2 ]
机构
[1] Siksha O Anusandhan Deemed be Univ, Dept Comp Sci & Engn, Bhubaneswar, India
[2] Natl Inst Technol Patna, Dept Comp Sci & Engn, Patna, Bihar, India
关键词
Intrusion detection system; Cyber-attack; Generative adversarial networks; Data synthetization; Data imbalance; DEEP LEARNING APPROACH; INTERNET;
D O I
10.1016/j.cose.2022.103054
中图分类号
TP [自动化技术、计算机技术];
学科分类号
0812 ;
摘要
Detecting a large number of attack classes accurately applying machine learning (ML) and deep learn-ing (DL) techniques depends on the number of representative samples available for each attack class. In most cases, the data samples are highly imbalanced that results in a biased intrusion detection model towards the majority classes. Under-sampling, over-sampling and SMOTE are some techniques among the solutions that turn the imbalanced dataset to balanced one. These techniques have not had much impact on the improvement of detection accuracy. To deal with this problem, this paper proposes a Wasser-stein Conditional Generative Adversarial Network (WCGAN) combined with an XGBoost Classifier. Gra-dient penalty along with the WCGAN is used for stable learning of the model. The proposed model is evaluated with some other GAN models (i.e., standard/vanilla GAN, Conditional GAN) which shows the significance of applying WCGAN in this paper. The loss on generated and real data shows a similar pat-tern and is lower for the Wasserstein variants of GAN compared to the other variants of the GAN model. The performance is benchmarked on three datasets NSL-KDD, UNSW-NB15 and BoT-IoT. The comparison of performance metrics before and after using the proposed framework with XGBoost classifier shows im-provement in terms of higher precision, recall and F-1 score. However, comparatively less improvement is observed in FAR compared to other classifiers such as Random Forest (RF), Decision Tree (DT), Support Vector Machine (SVM). The proposed work is also compared with a recent similar technique called DGM, which uses conditional GAN along with different ML classification models. The performance of the pro-posed model outperforms DGM. The proposed model creates a significant footprint (or, attack signatures) to tackle with the problem of data-imbalance during the design of the Intrusion Detection System (IDS).(c) 2022 Elsevier Ltd. All rights reserved.
引用
收藏
页数:15
相关论文
共 50 条
  • [21] Generative adversarial network based synthetic data training model for lightweight convolutional neural networks
    Rather, Ishfaq Hussain
    Kumar, Sushil
    MULTIMEDIA TOOLS AND APPLICATIONS, 2023, 83 (2) : 6249 - 6271
  • [22] Generative adversarial network based synthetic data training model for lightweight convolutional neural networks
    Ishfaq Hussain Rather
    Sushil Kumar
    Multimedia Tools and Applications, 2024, 83 : 6249 - 6271
  • [23] Autoencoder-Combined Generative Adversarial Networks for Synthetic Image Data Generation and Detection of Jellyfish Swarm
    Kim, Kyukwang
    Myung, Hyun
    IEEE ACCESS, 2018, 6 : 54207 - 54214
  • [24] Anomaly Generation Using Generative Adversarial Networks in Host-Based Intrusion Detection
    Salem, Milad
    Taheri, Shayan
    Yuan, Jiann Shiun
    2018 9TH IEEE ANNUAL UBIQUITOUS COMPUTING, ELECTRONICS & MOBILE COMMUNICATION CONFERENCE (UEMCON), 2018, : 683 - 687
  • [25] Towards intrusion detection in fog environments using generative adversarial network and long short-term memory network
    Qu, Aiyan
    Shen, Qiuhui
    Ahmadi, Gholamreza
    COMPUTERS & SECURITY, 2024, 145
  • [26] ADS-B Data Attack Detection Based on Generative Adversarial Networks
    Li, Tengyao
    Wang, Buhong
    Shang, Fute
    Tian, Jiwei
    Cao, Kunrui
    CYBERSPACE SAFETY AND SECURITY, PT I, 2020, 11982 : 323 - 336
  • [27] MANDA: On Adversarial Example Detection for Network Intrusion Detection System
    Wang, Ning
    Chen, Yimin
    Xiao, Yang
    Hu, Yang
    Lou, Wenjing
    Hou, Y. Thomas
    IEEE TRANSACTIONS ON DEPENDABLE AND SECURE COMPUTING, 2023, 20 (02) : 1139 - 1153
  • [28] Data Generation for Rare Transient Events: A Generative Adversarial Network Approach
    Ma, Rui
    Eftekharnejad, Sara
    2021 IEEE INDUSTRY APPLICATIONS SOCIETY ANNUAL MEETING (IAS), 2021,
  • [29] Model Evasion Attack on Intrusion Detection Systems using Adversarial Machine Learning
    Ayub, Md Ahsan
    Johnson, William A.
    Talbert, Douglas A.
    Siraj, Ambareen
    2020 54TH ANNUAL CONFERENCE ON INFORMATION SCIENCES AND SYSTEMS (CISS), 2020, : 324 - 329
  • [30] G-IDS: Generative Adversarial Networks Assisted Intrusion Detection System
    Shahriar, Md Hasan
    Haque, Nur Imtiazul
    Rahman, Mohammad Ashiqur
    Alonso, Miguel, Jr.
    2020 IEEE 44TH ANNUAL COMPUTERS, SOFTWARE, AND APPLICATIONS CONFERENCE (COMPSAC 2020), 2020, : 376 - 385