Anomaly-based Intrusion Detection Using Deep Neural Networks




Farahnakian Fahimeh, Heikkonen Jukka

PublisherAdvanced Institute of Convergence Information Technology

2018

International Journal of Digital Content Technology and Its Applications

12

3

70

81

2233-9310

http://www.globalcis.org/jdcta/ppl/JDCTA3825PPL.pdf

https://research.utu.fi/converis/portal/detail/Publication/39387058



Identification of network attacks is a matter of great concern for network operators due to extensive the number of vulnerabilities in computer systems and creativity of the attackers. Anomaly-based Intrusion Detection Systems (IDSs) present a significant opportunity to identify possible incidents, logging information and reporting attempts. However, these systems generate a low detection accuracy rate with changing network environment or services. To overcome this problem, we present a deep neural network architecture based on a combination of a stacked denoising autoencoder and a softmax classifier. Our architecture can extract important features from data and learn a model for detecting abnormal behaviors. The model is trained locally to denoise corrupted versions of their inputs based on stacking layers of denoising autoencoders in order to achieve reliable intrusion detection. Experimental results on real KDD-CUP'99 dataset show that our architecture outperformed shallow learning architectures and other deep neural network architectures.


Last updated on 2024-26-11 at 22:43