Accuracy Of Intrusion Detection System Research Articles

Sine Cosine Algorithm Based on Optimal Convolutional Autoencoder for Intrusion Detection and Classification Models

Network security comprises a multifaceted method that aims to protect computer networks from malicious activities, unauthorized access, and data breaches. The security mechanism is Intrusion Detection which is an important constituent that is employed to monitor and analyse the network traffic for recognizing and responding to intrusive or suspicious behavior. Innovative methods such as deep learning (DL) are employed to enhance the effectiveness of Intrusion Detection Systems (IDSs). DL is extremely implemented for IDS owing to its proficiency for automatically learning and extracting complex patterns and features from massive and multifaceted network datasets. Neural network (NN) models, permit the system to distinguish between anomalous patterns and normal network behaviors, increasing the accuracy of intrusion detection. The flexibility of DL methods to emerging cyberattacks with their adeptness to handle large - scale and various data, positions them as a strong and efficient tool for proactive and intelligent intrusion detection in existing cybersecurity settings. This article presents a Sine Cosine Algorithm with Optimal Convolutional Autoencoder for Intrusion Detection and Classification (SCAOCAE - IDC) method. The developed SCAOCAE - IDC system presents a wide - ranging strategy to improve the precision and effectiveness of IDSs. The method combines diverse advanced mechanisms like Min - Max scalar normalization for data preprocessing, Sine Cosine Algorithm (SCA) for feature selection (FS), Convolutional Autoencoder (CAE) for better feature extraction and classification, and Heap - Based Optimization (HBO) for hyperparameter tuning. The Min - Max scalar makes sure of robust data normalization, SCA increasingly chooses main features, CAE capably captures complex patterns in the data, and HBO fine - tunes hyperparameters for improved system performance. By employing the synergistic combination of such modules, the presented SCAOCAE - IDC algorithm indicates considerable outcomes for increasing the reliability and accuracy of IDSs and classification systems.

Contribution to Threat Management Through the Use of AI-Based IDS

Objectives: This paper aims to enhance cybersecurity through the integration of Artificial Intelligence (AI) in Intrusion Detection Systems (IDS), addressing the limitations of traditional IDS in detecting evolving cyber threats. Theoretical Framework: The study builds on existing research in cybersecurity, focusing on AI techniques such as decision trees and linear regression to improve the accuracy and effectiveness of AI-based IDS. Method: A comprehensive review of current AI-IDS methodologies is conducted, alongside an exploration of machine learning algorithms applied to datasets like KDD99 and NSL-KDD. The proposed architecture utilizes supervised machine learning to predict anomalies in network traffic. Results and Discussion: The findings indicate that AI-IDS can significantly reduce false positives and enhance detection of zero-day attacks through adaptive learning. The results highlight the importance of quality data and continuous model refinement. Research Implications: This research underscores the necessity for ongoing exploration of AI techniques in cybersecurity, suggesting future studies focus on real-time adaptive systems to further improve threat detection. Originality/Value: This paper contributes to the field by providing insights into the practical application of AI in IDS, offering a structured approach that combines theoretical knowledge with empirical evidence, thus paving the way for future innovations in cybersecurity.

A micro Reinforcement Learning architecture for Intrusion Detection Systems

This paper proposes an Intrusion Detection System (IDS) that utilizes Deep Reinforcement Learning (DRL) in a fine-grained manner to enhance the performance of binary and multiclass intrusion classification tasks. The proposed system, named Micro Reinforcement Learning Classifier (MRLC), is evaluated using three standard datasets. MRLC architecture utilizes a fine-grained learning approach to enhance IDS accuracy. Simulation studies demonstrate that MRLC has a high efficiency in discriminating different intrusion classes, outperforming state-of-the-art RL-based methods. The average accuracy of MRLC is 99.56%, 99.99%, 99.01% for NSL-KDD, CIC-IDS2018, and UNSW-NB15 datasets respectively. The implementation codes are available at https://github.com/boshradarabi/MICRO-RL-IDS.

Multi-order feature interaction-aware intrusion detection scheme for ensuring cyber security of intelligent connected vehicles

The evolution of technology has raised concerns regarding cybersecurity for intelligent connected vehicles (ICVs). In-vehicle network in ICVs lacks robust protection mechanisms, making it vulnerable to cyber threats. In response, intrusion detection systems (IDSs) for ICVs have been developed to protect vehicles from malicious cyber attacks. However, current IDS methods solely rely on independent features, limiting their learning capabilities and increasing the number of false detections. Moreover, many IDSs require the knowledge of mapping between network messages and contents, which restricts their application. To address these limitations, we propose the Multi-order Feature Interaction-aware Intrusion Detection (MIFI) scheme for ICVs. Feature attention cross network is designed to address higher-order feature interactions, while factorization machine is used for second-order interactions. Then a discriminator is utilized to detect the attacks. MIFI expands the feature space through features interaction, thereby enhancing its ability to detect attacks. Moreover, it perceives the relationships of vehicle messages, facilitating intrusion detection without knowing the corresponding rules of vehicle messages. The performance of the proposed method is evaluated on two real-vehicle datasets, affirming its effectiveness and robustness. MIFI achieves an accuracy of over 99% in detecting different attacks. The proposed method can improve the accuracy of traditional IDS to a maximum of 99.99%, and increase the highest F1-score to 97.18%, demonstrating the model’s ability of achieving multi-order feature interactions. Ultimately, MIFI is suitable for intrusion detection in different types of ICV networks, significantly contributing to the cybersecurity of ICVs.

Providing a hybrid approach to increase the accuracy of intrusion detection systems in computer networks

Intrusion detection is a critical obstacle in the realm of security and data mining methodologies. Consequently, researchers have extensively investigated the quest for the swiftest and most precise means of identifying intrusions. Essentially, intrusion detection systems are tasked with recognizing any unauthorized activities, misuse, or harm inflicted upon a system, be it by internal or external users. Recently, in order to design intrusion detection systems, artificial intelligence and machine learning methods have been used, each of which has its own characteristics and advantages. Accordingly, this article focuses on using machine learning to improve the accuracy of the intrusion detection process. In fact, by using machine learning, trends, and patterns can be easily identified and thus used in a network environment to detect intrusion. It can be very useful. For this purpose, we utilize Radial Basis Function (RBF) neural networks and support vector machine (SVM) algorithm to improve decision-making and intrusion detection. By employing RBF neural networks, important features of the data are extracted, which in turnPlease check if the author details and affiliations are presented correctly. Kindly amend if necessary. enhance the overall performance of the solution and the efficiency of the SVM algorithm. This is because feature reduction ultimately leads to improved effectiveness of the SVM algorithm. In methods lacking this capability, the learning algorithm is compelled to utilize features that have no specific correlation with intrusion and essentially do not contribute to identifying attacks. Such learning approaches essentially learn from noisy data, which negatively impacts the intrusion detection solution. Finally, the proposed solution was evaluated using Python programming language and KDD99 data set. The results of the evaluation indicate that the proposed solution has a higher accuracy and precision than other evaluated solutions. So, the accuracy is 97, and the precision is over 99%.

Comparison of Gain Ratio and Chi-Square Feature Selection Methods in Improving SVM Performance on IDS

An intrusion detection system (IDS) is a security technology designed to identify and monitor suspicious activity in a computer network or system and detect potential attacks or security breaches. The importance of accuracy in IDS must be addressed, given that the response to any alert or activity generated by the system must be precise and measurable. However, achieving high accuracy in IDS requires a process that takes work. The complex network environment and the diversity of attacks led to significant challenges in developing IDS. The application of algorithms and optimization techniques needs to be considered to improve the accuracy of IDS. Support vector machine (SVM) is one data mining method with a high accuracy level in classifying network data packet patterns. A feature selection stage is needed for an optimal classification process, which can also be applied to SVM. Feature selection is an essential step in the data preprocessing phase; optimization of data input can improve the performance of the SVM algorithm, so this study compares the performance between feature selection algorithms, namely Information Gain Ratio and Chi-Square, and then classifies IDS data using the SVM algorithm. This outcome implies the importance of selecting the right features to develop an effective IDS.

A Novel Approach to Android Malware Intrusion Detection Using Zero-Shot Learning GANs

This study proposes an innovative intrusion detection system for Android malware based on a zero-shot learning GAN approach. Our system achieved an accuracy of 99.99%, indicating that this approach can be highly effective for identifying intrusion events. The proposed approach is particularly valuable for analyzing complex datasets such as those involving Android malware. The results of this study demonstrate the potential of this method for improving the accuracy and efficiency of intrusion detection systems in real-world scenarios. Future work could involve exploring alternative feature selection techniques and evaluating the performance of other machine learning classifiers on larger datasets to further enhance the accuracy of intrusion detection systems. The study highlights the importance of adopting advanced machine learning techniques such as zero-shot learning GANs to enhance the effectiveness of intrusion detection systems in cybersecurity. The proposed system presents a significant contribution to the field of intrusion detection, providing an effective solution for detecting malicious activities in Android malware, which can improve the security of mobile devices.

Designing accurate lightweight intrusion detection systems for IoT networks using fine-tuned linear SVM and feature selectors

Intrusion detection systems (IDSs) play a crucial role in ensuring the security and integrity of Internet of Things (IoT) networks by blocking unwanted packets and facilitating secure traffic flow. However, traditional IDSs based on data mining, fuzzy logic, heuristics, rough sets, or conventional machine learning (ML) techniques often lack accuracy and are not energy efficient, primarily due to inappropriate feature selection or the use of all features in datasets. To address these challenges, this study proposes a lightweight, accurate, and high-performance IDSs for IoT networks using fine-tuned Linear Support Vector Machines (LSVMs) and feature selection methods. Four feature selectors, including Importance Coefficient-, Forward- and Backward-Sequential-, and Correlation Coefficient-based approaches, were applied to identify the most important and efficient features from three datasets: KDD Cup-1999, BotIoT-2018, and N-BaIoT-2021. The fine-tuned LSVMs algorithm was then trained on subsets of the selected and full features of the datasets to detect various IoT botnet attacks. Evaluation results show that the IDS models trained with subsets of relevant features outperform those trained with the full feature sets of the datasets in terms of training and test performance and accuracy. The study concludes that it is possible to develop lightweight IDSs by training them with a reduced number of features (6) instead of using the full features (40, 15, 115) in KDD Cup-1999, BotIoT-2018, and N-BaIoT-2021, respectively. The findings highlight a potential for significantly improving the efficiency and accuracy of IDSs on IoT networks using the fine-tuned feature selectors and LSVMs.

Application of Deep Neural Network with Frequency Domain Filtering in the Field of Intrusion Detection

In the field of intrusion detection, existing deep learning algorithms have limited capability to effectively represent network data features, making it challenging to model the complex mapping relationship between network data and attack behavior. This limitation, in turn, impacts the detection accuracy of intrusion detection systems. To address this issue and further enhance detection accuracy, this paper proposes an algorithm called the Fourier Neural Network (FNN). The core of FNN consists of a Deep Fourier Neural Network Block (DFNNB), which is composed of a Hadamard Neural Network (HNN) and a Fourier Neural Network Layer (FNNL). In a DFNNB, the HNN is responsible for sampling the network intrusion data samples in different time domain spaces. The FNNL, on the other hand, performs a Fourier transform on the samples outputted by the HNN and maps them to the frequency domain space, followed by a filtering process. Finally, the data processed by filtering are transformed back to the time domain space for subsequent feature extraction work by the DFNNB. Additionally, to enhance the algorithm’s detection accuracy and filter out noise signals, this paper also introduces a High-energy Filtering Process (HFP), which eliminates noise signals from the data signal and reduces interference on the final detection result. Due to the ability of FNN to process network data in both the time domain space and the frequency domain space, it possesses a stronger capability in expressing data features. Finally, this paper conducts performance evaluations on the KDD Cup99, NSL-KDD, UNSW-NB15, and CICIDS2017 datasets. The results demonstrate that the proposed FNN-based IDS model achieves higher detection rates, lower false alarm rates, and better detection performance than classical deep learning and machine learning methods.

An efficient blockchain‐based approach to improve the accuracy of intrusion detection systems

AbstractIntrusion Detection System (IDS) is a critical cybersecurity task that involves monitoring network traffic for malicious activity and taking appropriate action to stop it. However, insufficient training data or improperly chosen thresholds often limit the accuracy of such systems, resulting in high false‐positive rates. To improve the accuracy of an IDS, blockchain technology can be used as it provides a secure, decentralized, immutable ledger that can track suspicious activity over time and also identify intrusions globally. In this paper, the authors propose a novel methodology to improve the accuracy of blockchain‐based IDS. The approach combines different intrusion detection algorithms using a blockchain‐integrated architecture. It is based on the fusion principle and weighted votes, which the authors used to determine their results. The authors tested the system on DARPA 99 and MIT‐Lincoln Labs datasets using accuracy and false‐positive rate as their two metrics. The system achieved 92.6% accuracy and 7.4% false‐positive rates, indicating that the proposed system significantly increases the accuracy while reducing the false‐positive rate, opening up new opportunities for the development of highly accurate networks.

Securing the Digital Perimeter Intrusion Detection for Robust Data Protection in Cybersecurity

In cybersecurity, protecting the digital boundaries is very important to avoid data leaks and illegal access. In order to keep data safe, intrusion detection systems (IDS) are very important for keeping an eye on things and finding strange behavior. This paper suggests a new way to make IDS better at protecting the digital border. Propsoed method uses complex encryption algorithms to make sure that data is safer within the digital borders. When you protect private data, it stays safe even if someone breaks into your network and gets to the data without the decoding key. In addition, our system uses machine learning techniques to constantly look at network traffic trends and find strange things that could mean an attack. First, it gives you tracking and reports in real time, so you can quickly deal with security risks. The second reason is that encryption protects the privacy, security, and validity of data. Third, adding machine learning improves the accuracy of IDS by lowering the number of false alarms and finding new risks. The paper discuss strong data protection in cybersecurity, the digital boundaries must be protected with advanced encryption methods and IDS that are based on machine learning. This method improves network security, keeps private data safe, and lowers the risk of hacking.

Enhancing the Sustainability of Deep-Learning-Based Network Intrusion Detection Classifiers against Adversarial Attacks

An intrusion detection system (IDS) is an effective tool for securing networks and a dependable technique for improving a user’s internet security. It informs the administration whenever strange conduct occurs. An IDS fundamentally depends on the classification of network packets as benign or attack. Moreover, IDSs can achieve better results when built with machine learning (ML)/deep learning (DL) techniques, such as convolutional neural networks (CNNs). However, there is a limitation when building a reliable IDS using ML/DL techniques, which is their vulnerability to adversarial attacks. Such attacks are crafted by attackers to compromise the ML/DL models, which affects their accuracy. Thus, this paper describes the construction of a sustainable IDS based on the CNN technique, and it presents a method for defense against adversarial attacks that enhances the IDS’s accuracy and ensures it is more reliable in performing classification. To achieve this goal, first, two IDS models with a convolutional neural network (CNN) were built to enhance the IDS accuracy. Second, seven adversarial attack scenarios were designed against the aforementioned CNN-based IDS models to test their reliability and efficiency. The experimental results show that the CNN-based IDS models achieved significant increases in the intrusion detection system accuracy of 97.51% and 95.43% compared with the scores before the adversarial scenarios were applied. Furthermore, it was revealed that the adversarial attacks caused the models’ accuracy to significantly decrease from one attack scenario to another. The Auto-PGD and BIM attacks had the strongest effect against the CNN-based IDS models, with accuracy drops of 2.92% and 3.46%, respectively. Third, this research applied the adversarial perturbation elimination with generative adversarial nets (APE_GAN++) defense method to enhance the accuracy of the CNN-based IDS models after they were affected by adversarial attacks, which was shown to increase after the adversarial attacks in an intelligible way, with accuracy scores ranging between 78.12% and 89.40%.

Intelligent Intrusion Detection for Internet of Things Security: A Deep Convolutional Generative Adversarial Network-Enabled Approach

With the rapid advance of Internet of Things (IoT), it is difficult for cloud-centric computing to meet the requirements of low latency and ease of use. As an open and distributed system, edge computing integrates computing, networking, storage, and applications. It provides intelligent services on the edge of an IoT. The edge network is composed of various wireless and wired networks, and the computing and storage resources of edge nodes are limited. These conditions make the edge network expose to a variety of cyber attacks. Additionally, it is difficult for an IoT edge node to support large-scale network data collection and detection for IoT security. Although big data-enabled intrusion detection algorithms can ensure the high accuracy of intrusion detection systems, it is stressful for resource-limited edge nodes to implement those algorithms in IoT. Motivated by these challenges, we propose an intelligent intrusion detection algorithm implemented by big data mining based on a fuzzy rough set, generative adversarial network (GAN), and convolutional neural network (CNN). In our method, we first propose a fuzzy rough set-based algorithm to perform feature selection for big data via IoT. Then, we take advantage of the efficient feature extraction capabilities of CNN for implementing intrusion detection based on selected features. Furthermore, after combining CNN and GAN, we propose an intelligent algorithm to realize intrusion detection in a variety of scenarios. Finally, the proposed method is compared with existing methods for evaluation. Simulation results show that our method has up to 4% higher accuracy than existing methods.

AIDTF: Adversarial training framework for network intrusion detection

Network Intrusion Detection Systems (IDS) have achieved high accuracy by widely applying Machine Learning (ML) models. However, most current ML-based IDSs can not cope with targeted attacks from adversaries because they are commonly trained and tested using fixed data sets. In this paper, we propose an Adversarial Intrusion Detection Training Framework (AIDTF) to improve the robustness of IDSs, which consists of an attacker model a-model, a defender model d-model, and a black-box trainer t-module. Both the a-model and d-model are multilayer perceptrons, and the t-module is the module used to train IDSs. AIDTF improves the accuracy of IDS by using an adversarial training method, which is different from traditional training methods. Taking the distribution of normal samples in the dataset as the distribution that the a-model and d-model need to learn, the goal of the a-model is to generate samples that deceive the d-model, while the goal of the d-model is to determine whether the input samples are real samples, so there is an adversarial relationship between a-model and d-model. Different types of IDSs can be trained by the t-module using the samples generated from the confrontation between the a-model and the d-model, and we call this kind of IDS the Adversarial Training Intrusion Detection System (ATIDS). The main contribution of this paper is to propose a training method that is used to obtain an IDS with high accuracy not only for known test sets but also to identify unknown disguised attack samples. We tested different types of ATIDSs using the current mainstream attack methods, which include the Fast Gradient Method, Fast Gradient Sign Method, Projected Gradient Descent, and Jacobs Saliency Map Algorithm. The experimental results prove that AIDTF outperforms other adversarial training methods with not only higher accuracy for the test set but also up to a 99% recognition rate for the attack samples.

An Improved Intrusion Detection in Wireless Sensor Networks Using Hybrid Multiclass Over-Sampling and Deep Neural Networks

With the emergence of new attacks, there is a continual need for innovative approaches that can closely monitor and swiftly adapt to evolving threats. IDSs can be broadly categorized into misuse detection and anomaly detection, each utilizing machine-learning methods. Machine learning algorithms, particularly those relying on datasets like DARPA and KDD Cup 1999,have gained popularity. However, challenges include dataset limitations, overfitting, and the requirement for substantial computational power. This study focuses on the specific problem of class imbalance in Wireless Sensor Networks (WSN) datasets for intrusion detection. Existing techniques, such as oversampling and undersampling, have limitations, and the imbalance poses challenges for accurate intrusion detection model development. The research aims to develop an enhanced intrusion detection model addressing multiclass imbalance through an optimized KNN-SMOTE oversampling technique integrated with a Deep Learning model. The significance lies in its potential to greatly enhance the accuracy of intrusion detection systems, contributing to the security ofcomputer networks. The study's scope involves static dataset analysis and multiclass classification of intrusion attacks. The research questions revolve around the development of a multiclass oversampling technique, a hybrid model, and the performance evaluation of the developed system in comparison to existing IDS.The research proposes a novel OK-SMOTE-DL model combining the potential of the KNN model, firefly algorithm, and the SMOTE model fused with Deep Learning techniques to help create a better model for handling multiclass intrusion datasets that can similarly detect minority classes effectively in wireless sensornetworks

Perspicacious Apprehension of HDTbNB Algorithm Opposed to Security Contravention

The exponential pace of the spread of the digital world has served as one of the assisting forces to generate an enormous amount of information flowing over the network. The data will always remain under the threat of technological suffering where intruders and hackers consistently try to breach the security systems by gaining personal information insights. In this paper, the authors proposed the HDTbNB (Hybrid Decision Tree-based Naïve Bayes) algorithm to find the essential features without data scaling to maximize the model’s performance by reducing the false alarm rate and training period to reduce zero frequency with enhanced accuracy of IDS (Intrusion Detection System) and to further analyze the performance execution of distinct machine learning algorithms as Naïve Bayes, Decision Tree, K-Nearest Neighbors and Logistic Regression over KDD 99 dataset. The performance of algorithm is evaluated by making a comparative analysis of computed parameters as accuracy, macro average, and weighted average. The findings were concluded as a percentage increase in accuracy, precision, sensitivity, specificity, and a decrease in misclassification as 9.3%, 6.4%, 12.5%, 5.2% and 81%.

Ensemble of Bio-inspired Algorithm with Statistical Measures for Feature Selection to Design a Flow-Based Intrusion Detection System

In today's high-speed network, the existing Intrusion Detection System (IDS) approaches experience more false alarm rates with low detection capability. Nowadays, IDS needs to analyze a considerable amount of data. The larger the amount of data results in the longer the time to analyze it, which delays attack detection. The IDS usability is defined as its capability to trigger an alarm early enough to minimize the damage that an ongoing attack can cause and provide a reduced range of warning (false alarm). These underline the necessity of feature selection in IDS to identify the informative features and overlook the irrelevant or redundant features that affect the IDS's detection rate and computational complexity. It implies that anticipating an ideal number of features from a flow-based intrusion dataset can improve IDS accuracy. Therefore, this paper proposes an ensemble of a bio-inspired algorithm (Krill Herd Algorithm) with statistical measures (Information Gain) to select optimal features for a flow-based IDS. This ensemble technique has shown improvement in the detection rate, decreases the false alarm rate, and reduces the computation time of the IDS.

Adversarial Attacks for Intrusion Detection Based on Bus Traffic

A communication bus is used to transmit electronic signals between components, realize functional integration through information sharing, and improve system efficiency. The current research on intrusion detection based on bus traffic is mainly pertaining to machine learning or time logic detection. However, recent studies have shown that machine learning models perform poorly in defense of various adversarial attacks. In this article, we propose a method based on generative adversarial networks to transform normal traffic into adversarial and malicious ones. To be closer to reality, adversarial example generation models on two threat scenarios are proposed. At the same time, the distance metric L <inf xmlns:mml="http://www.w3.org/1998/Math/MathML" xmlns:xlink="http://www.w3.org/1999/xlink">2</inf> is introduced in the loss function to ensure the authenticity of the generated adversarial examples. To evaluate our method, we use the traffic generated by the model to various intrusion detection systems based on bus. Experimental results show that the model is effective because the detection rate of different intrusion detection models decreases after the traffic is processed. Thus, the traffic generated by our models can be used as training data to enhance the accuracy of intrusion detection systems.

An Ensemble of Prediction and Learning Mechanism for Improving Accuracy of Anomaly Detection in Network Intrusion Environments

The connectivity of our surrounding objects to the internet plays a tremendous role in our daily lives. Many network applications have been developed in every domain of life, including business, healthcare, smart homes, and smart cities, to name a few. As these network applications provide a wide range of services for large user groups, the network intruders are prone to developing intrusion skills for attack and malicious compliance. Therefore, safeguarding network applications and things connected to the internet has always been a point of interest for researchers. Many studies propose solutions for intrusion detection systems and intrusion prevention systems. Network communities have produced benchmark datasets available for researchers to improve the accuracy of intrusion detection systems. The scientific community has presented data mining and machine learning-based mechanisms to detect intrusion with high classification accuracy. This paper presents an intrusion detection system based on the ensemble of prediction and learning mechanisms to improve anomaly detection accuracy in a network intrusion environment. The learning mechanism is based on automated machine learning, and the prediction model is based on the Kalman filter. Performance analysis of the proposed intrusion detection system is evaluated using publicly available intrusion datasets UNSW-NB15 and CICIDS2017. The proposed model-based intrusion detection accuracy for the UNSW-NB15 dataset is 98.801 percent, and the CICIDS2017 dataset is 97.02 percent. The performance comparison results show that the proposed ensemble model-based intrusion detection significantly improves the intrusion detection accuracy.

Intrusion Detection Method Based on Adaptive Clonal Genetic Algorithm and Backpropagation Neural Network

Intrusion Detection System (IDS) is an important part of ensuring network security. When the system faces network attacks, it can identify the source of threats in a timely and accurate manner and adjust strategies to prevent hackers from intruding. Efficient IDS can identify external threats well, but traditional IDS has poor performance and low recognition accuracy. To improve the detection rate and accuracy of IDS, this paper proposes a novel ACGA-BPNN method based on adaptive clonal genetic algorithm (ACGA) and backpropagation neural network (BPNN). ACGA-BPNN is simulated on the KDD-CUP’99 and UNSW-NB15 data sets. The simulation results indicate that, in contrast to the methods based on simulated annealing (SA) and genetic algorithm (GA), the detection rate and accuracy of ACGA-BPNN are much higher than of GA-BPNN and SA-BPNN. In the classification results of KDD-CUP’99, the classification accuracy of ACGA-BPNN is 11% higher than GA-BPNN and 24.2% higher than SA-BPNN, and F-score reaches 99.0%. In addition, ACGA-BPNN has good global searchability and its convergence speed is higher than that of GA-BPNN and SA-BPNN. Furthermore, ACGA-BPNN significantly improves the overall detection performance of IDS.