Abstract

Nowadays, network attacks are the most crucial problem of modern society. All networks, from small to large, are vulnerable to network threats. An intrusion detection (ID) system is critical for mitigating and identifying malicious threats in networks. Currently, deep learning (DL) and machine learning (ML) are being applied in different domains, especially information security, for developing effective ID systems. These ID systems are capable of detecting malicious threats automatically and on time. However, malicious threats are occurring and changing continuously, so the network requires a very advanced security solution. Thus, creating an effective and smart ID system is a massive research problem. Various ID datasets are publicly available for ID research. Due to the complex nature of malicious attacks with a constantly changing attack detection mechanism, publicly existing ID datasets must be modified systematically on a regular basis. So, in this paper, a convolutional recurrent neural network (CRNN) is used to create a DL-based hybrid ID framework that predicts and classifies malicious cyberattacks in the network. In the HCRNNIDS, the convolutional neural network (CNN) performs convolution to capture local features, and the recurrent neural network (RNN) captures temporal features to improve the ID system’s performance and prediction. To assess the efficacy of the hybrid convolutional recurrent neural network intrusion detection system (HCRNNIDS), experiments were done on publicly available ID data, specifically the modern and realistic CSE-CIC-DS2018 data. The simulation outcomes prove that the proposed HCRNNIDS substantially outperforms current ID methodologies, attaining a high malicious attack detection rate accuracy of up to 97.75% for CSE-CIC-IDS2018 data with 10-fold cross-validation.

Highlights

  • Nowadays, information and communication technology (ICT) systems play a crucial role in every area of business and people’s lives

  • To improve the learning capacity and performance of the intrusion detection (ID) system, we propose an improved IDS that consists of up-to-date deep learning (DL) methods, such as convolutional neural network (CNN), and classical machine learning (ML), such as recurrent neural network (RNN)

  • The output of the hybrid convolutional recurrent neural network-based network intrusion detection system is higher than that of traditional classification techniques when conducting experiments on the well-known and contemporary real-life CSECIC-IDS2018 dataset; it improves the accuracy of ID, providing a novel research method for ID

Read more

Summary

Introduction

Information and communication technology (ICT) systems play a crucial role in every area of business and people’s lives. The performance of the anomaly detection technique is effective and has a high false-positive rate To overcome this issue, various organizations have used state protocol analysis, which combines the benefits of both signature and anomaly-based systems [6]. Processes 2021, 9, 834 network traffic in a heterogeneous environment These challenges are the motivation to develop a hybrid convolutional recurrent neural network-based ID system using a realworld dataset with a focus on evaluating the efficacy of ML and DL classifiers in the ID domain. The output of the hybrid convolutional recurrent neural network-based network intrusion detection system is higher than that of traditional classification techniques when conducting experiments on the well-known and contemporary real-life CSECIC-IDS2018 dataset; it improves the accuracy of ID, providing a novel research method for ID.

Related Work
Proposed
Overview of the HCRNNIDS
Datasets
Experimental Details
Evaluation Metrics
Evaluation of the Proposed HCRNNIDS
Overall Evaluation
Conclusions and Future Work
Full Text
Published version (Free)

Talk to us

Join us for a 30 min session where you can share your feedback and ask us any queries you have

Schedule a call