A network threat analysis method combined with kernel PCA and LSTM-RNN

Abstract

With the evolution of network threat, identifying attack from both external and internal is getting more and more difficult. To detect both known and unknown malicious attacks, several machine learning algorithms are utilized. However, these algorithms have still some limitations such as high false positive and false alarm rate. To overcome above challenge, we propose a threat analysis method combined with kernel principal component analysis (PCA) and long short-term memory recurrent neural network (LSTM-RNN). To achieve high accurate detection rate, data preprocessing, feature extraction, attack detection is seamlessly integrated into an end-to-end detection method. To assess the method, the well-known NSL-KDD dataset has been used. Experimental results show that the proposed threat analysis method greatly outperforms several attack detection methods that use SVM, neural network or Bayesian methods.