A Novel Network Intrusion Detection System Based on CNN

被引:36
作者
Chen, Lin [1 ]
Kuang, Xiaoyun [1 ]
Xu, Aidong [1 ]
Suo, Siliang [2 ]
Yang, Yiwei [2 ]
机构
[1] CSG, Elect Power Res Inst, Guangzhou 510663, Peoples R China
[2] Key Lab Guangdong Elect Power Syst Network Secur, Guangzhou 510663, Peoples R China
来源
2020 EIGHTH INTERNATIONAL CONFERENCE ON ADVANCED CLOUD AND BIG DATA (CBD 2020) | 2020年
关键词
Network Intrusion Detection System; CNN; Deep Learning; CLASSIFICATION;
D O I
10.1109/CBD51900.2020.00051
中图分类号
TP [自动化技术、计算机技术];
学科分类号
0812 ;
摘要
Network intrusion detection system (NIDS) plays an important role in network security. It can detect the malicious traffic and prevent the network intrusion. Traditional methods used machine learning techniques such as support vector machine, Bayesian classification, decision tree and k-means. The traditional machine learning methods first need to manually select features and has obvious limitations. In this paper, we propose a novel NIDS system based on convolutional neural network. We train deep-learning based detection models using both extracted features and original network traffic. We conduct comprehensive experiments using well-known benchmark datasets. The results verify the effectiveness of our system and also demonstrate the model trained through raw traffic has better accuracy than the model trained using extracted features.
引用
收藏
页码:243 / 247
页数:5
相关论文
共 9 条
[1]   A novel SVM-kNN-PSO ensemble method for intrusion detection system [J].
Aburomman, Abdulla Amin ;
Reaz, Mamun Bin Ibne .
APPLIED SOFT COMPUTING, 2016, 38 :360-372
[2]  
[Anonymous], 2015, K NEAREST NEIGHBOR B
[3]  
[Anonymous], 2015, P KOR I INF SEC CRYP
[4]  
BAI X, 2015, RES INTERNET TRAFFIC
[5]   A new approach for internet traffic classification: GA-WK-ELM [J].
Ertam, Fatih ;
Avci, Engin .
MEASUREMENT, 2017, 95 :135-142
[6]   Kitsune: An Ensemble of Autoencoders for Online Network Intrusion Detection [J].
Mirsky, Yisroel ;
Doitshman, Tomer ;
Elovici, Yuval ;
Shabtai, Asaf .
25TH ANNUAL NETWORK AND DISTRIBUTED SYSTEM SECURITY SYMPOSIUM (NDSS 2018), 2018,
[7]   A Hypergraph and Arithmetic Residue-based Probabilistic Neural Network for classification in Intrusion Detection Systems [J].
Raman, M. R. Gauthama ;
Somu, Nivethitha ;
Kirthivasan, Kannan ;
Sriram, V. S. Shankar .
NEURAL NETWORKS, 2017, 92 :89-97
[8]   Toward Generating a New Intrusion Detection Dataset and Intrusion Traffic Characterization [J].
Sharafaldin, Iman ;
Lashkari, Arash Habibi ;
Ghorbani, Ali A. .
ICISSP: PROCEEDINGS OF THE 4TH INTERNATIONAL CONFERENCE ON INFORMATION SYSTEMS SECURITY AND PRIVACY, 2018, :108-116
[9]  
Wang W, 2017, 2017 31ST INTERNATIONAL CONFERENCE ON INFORMATION NETWORKING (ICOIN), P712, DOI 10.1109/ICOIN.2017.7899588