Transfer Learning Based Intrusion Detection

Author(s):  
Zahra Taghiyarrenani ◽  
Ali Fanian ◽  
Ehsan Mahdavi ◽  
Abdolreza Mirzaei ◽  
Hamed Farsi
Sensors ◽  
2021 ◽  
Vol 21 (14) ◽  
pp. 4736
Author(s):  
Sk. Tanzir Mehedi ◽  
Adnan Anwar ◽  
Ziaur Rahman ◽  
Kawsar Ahmed

The Controller Area Network (CAN) bus works as an important protocol in the real-time In-Vehicle Network (IVN) systems for its simple, suitable, and robust architecture. The risk of IVN devices has still been insecure and vulnerable due to the complex data-intensive architectures which greatly increase the accessibility to unauthorized networks and the possibility of various types of cyberattacks. Therefore, the detection of cyberattacks in IVN devices has become a growing interest. With the rapid development of IVNs and evolving threat types, the traditional machine learning-based IDS has to update to cope with the security requirements of the current environment. Nowadays, the progression of deep learning, deep transfer learning, and its impactful outcome in several areas has guided as an effective solution for network intrusion detection. This manuscript proposes a deep transfer learning-based IDS model for IVN along with improved performance in comparison to several other existing models. The unique contributions include effective attribute selection which is best suited to identify malicious CAN messages and accurately detect the normal and abnormal activities, designing a deep transfer learning-based LeNet model, and evaluating considering real-world data. To this end, an extensive experimental performance evaluation has been conducted. The architecture along with empirical analyses shows that the proposed IDS greatly improves the detection accuracy over the mainstream machine learning, deep learning, and benchmark deep transfer learning models and has demonstrated better performance for real-time IVN security.


2018 ◽  
Vol 22 (S4) ◽  
pp. 9889-9904 ◽  
Author(s):  
Lianbing Deng ◽  
Daming Li ◽  
Xiang Yao ◽  
David Cox ◽  
Haoxiang Wang

2021 ◽  
Author(s):  
Phan The Duy ◽  
Nghi Hoang Khoa ◽  
Hoang Hiep ◽  
Nguyen Ba Tuan ◽  
Hien Do Hoang ◽  
...  

Revolutionizing operation model of traditional network in programmability, scalability, and orchestration, Software-Defined Networking (SDN) has considered as a novel network management approach for a massive network with heterogeneous devices. However, it is also highly susceptible to security attacks like conventional network. Inspired from the success of different machine learning algorithms in other domains, many intrusion detection systems (IDS) are presented to identify attacks aiming to harm the network. In this paper, leveraging the flow-based nature of SDN, we introduce DeepFlowIDS, a deep learning (DL)-based approach for anomaly detection using the flow analysis method in SDN. Furthermore, instead of using a lot of network properties, we only utilize essential characteristics of traffic flows to analyze with deep neural networks in IDS. This is to reduce the computational and time cost of attack traffic detection. Besides, we also study the practical benefits of applying deep transfer learning from computer vision to intrusion detection. This method can inherit the knowledge of an effective DL model from other contexts to resolve another task in cybersecurity. Our DL-based IDSs are built and trained with the NSL-KDD and CICIDS2018 dataset in both fine-tuning and feature extractor strategy of transfer learning. Then, it is integrated with the SDN controller to analyze traffic flows retrieved from OpenFlow statistics to recognize the anomaly action in the network.


2021 ◽  
Vol 547 ◽  
pp. 119-135
Author(s):  
Xinghua Li ◽  
Zhongyuan Hu ◽  
Mengfan Xu ◽  
Yunwei Wang ◽  
Jianfeng Ma

2020 ◽  
Vol 24 (2) ◽  
pp. 363-383 ◽  
Author(s):  
Jingmei Li ◽  
Weifei Wu ◽  
Di Xue

2019 ◽  
Vol 24 (6) ◽  
pp. 2002-2013
Author(s):  
Mu Zhou ◽  
Yaoping Li ◽  
Zhian Deng ◽  
Yongliang Sun ◽  
Yanmeng Wang ◽  
...  

Sign in / Sign up

Export Citation Format

Share Document