DualNet: Locate Then Detect Effective Payload with Deep Attention Network

10/23/2020
by   Shiyi Yang, et al.
0

Network intrusion detection (NID) is an essential defense strategy that is used to discover the trace of suspicious user behaviour in large-scale cyberspace, and machine learning (ML), due to its capability of automation and intelligence, has been gradually adopted as a mainstream hunting method in recent years. However, traditional ML based network intrusion detection systems (NIDSs) are not effective to recognize unknown threats and their high detection rate often comes with the cost of high false alarms, which leads to the problem of alarm fatigue. To address the above problems, in this paper, we propose a novel neural network based detection system, DualNet, which is constructed with a general feature extraction stage and a crucial feature learning stage. DualNet can rapidly reuse the spatial-temporal features in accordance with their importance to facilitate the entire learning process and simultaneously mitigate several optimization problems occurred in deep learning (DL). We evaluate the DualNet on two benchmark cyber attack datasets, NSL-KDD and UNSW-NB15. Our experiment shows that DualNet outperforms classical ML based NIDSs and is more effective than existing DL methods for NID in terms of accuracy, detection rate and false alarm rate.

READ FULL TEXT
research
12/04/2020

Review: Deep Learning Methods for Cybersecurity and Intrusion Detection Systems

As the number of cyber-attacks is increasing, cybersecurity is evolving ...
research
09/22/2019

LuNet: A Deep Neural Network for Network Intrusion Detection

Network attack is a significant security issue for modern society. From ...
research
05/19/2021

Hunter in the Dark: Discover Anomalous Network Activity Using Deep Ensemble Network

Machine learning (ML)-based network intrusion detection system (NIDS) pl...
research
06/23/2022

LBDMIDS: LSTM Based Deep Learning Model for Intrusion Detection Systems for IoT Networks

In the recent years, we have witnessed a huge growth in the number of In...
research
08/05/2020

Densely Connected Residual Network for Attack Recognition

High false alarm rate and low detection rate are the major sticking poin...
research
04/21/2021

Robustness of ML-Enhanced IDS to Stealthy Adversaries

Intrusion Detection Systems (IDS) enhanced with Machine Learning (ML) ha...

Please sign up or login with your details

Forgot password? Click here to reset