A LSTM-FCNN based multi-class intrusion detection using scalable framework

Abstract

Machine learning methods are widely used to implement intrusion detection models for detecting and classifying intrusions in a network or a system. However, many challenges arise since hackers continuously change the attacking patterns by discovering new system vulnerabilities. The degree of malicious attempts increases rapidly; as a result, conventional approaches fail to process voluminous data. So, a sophisticated detection approach with scalable solutions is required to tackle the problem. A deep learning model is proposed to address the intrusion classification problem effectively. The LSTM (Long Short-Term Memory) and FCN (Fully Connected Network) deep learning approaches classify the benign and malicious connections on intrusion datasets. The objective is to classify multi-class attack patterns more accurately. The proposed deep learning model provides a better classification result in two-class and five-class problems. It achieves an accuracy of 98.52%, 98.94%, 99.03%, 99.36%, 100%, and 99.64% using KDDCup99, NSLKDD, GureKDD, KDDCorrected, Kyoto, NITRIDS dataset respectively.