Deep Adversarial Learning in Intrusion Detection: A Data Augmentation Enhanced Framework

by   He Zhang, et al.

Intrusion detection systems (IDSs) play an important role in identifying malicious attacks and threats in networking systems. As fundamental tools of IDSs, learning based classification methods have been widely employed. When it comes to detecting network intrusions in small sample sizes (e.g., emerging intrusions), the limited number and imbalanced proportion of training samples usually cause significant challenges in training supervised and semi-supervised classifiers. In this paper, we propose a general network intrusion detection framework to address the challenges of both data scarcity and data imbalance. The novelty of the proposed framework focuses on incorporating deep adversarial learning with statistical learning and exploiting learning based data augmentation. Given a small set of network intrusion samples, it first derives a Poisson-Gamma joint probabilistic generative model to generate synthesised intrusion data using Monte Carlo methods. Those synthesised data are then augmented by deep generative neural networks through adversarial learning. Finally, it adopts the augmented intrusion data to train supervised models for detecting network intrusions. Comprehensive experimental validations on KDD Cup 99 dataset show that the proposed framework outperforms the existing learning based IDSs in terms of improved accuracy, precision, recall, and F1-score.


Using EBGAN for Anomaly Intrusion Detection

As an active network security protection scheme, intrusion detection sys...

PWG-IDS: An Intrusion Detection Model for Solving Class Imbalance in IIoT Networks Using Generative Adversarial Networks

With the continuous development of industrial IoT (IIoT) technology, net...

Bayesian Hyperparameter Optimization for Deep Neural Network-Based Network Intrusion Detection

Traditional network intrusion detection approaches encounter feasibility...

A Deep Learning Approach to Create DNS Amplification Attacks

In recent years, deep learning has shown itself to be an incredibly valu...

Intelligent Railway Foreign Object Detection: A Semi-supervised Convolutional Autoencoder Based Method

Automated inspection and detection of foreign objects on railways is imp...

Detecting In-vehicle Intrusion via Semi-supervised Learning-based Convolutional Adversarial Autoencoders

With the development of autonomous vehicle technology, the controller ar...

SSIDS: Semi-Supervised Intrusion Detection System by Extending the Logical Analysis of Data

Prevention of cyber attacks on the critical network resources has become...

Please sign up or login with your details

Forgot password? Click here to reset