aalto1 untyped-item.component.html
Network Intrusion Detection System Using Anomaly Detection Techniques
Loading...
Access rights
openAccess
acceptedVersion
URL
Journal Title
Journal ISSN
Volume Title
A4 Artikkeli konferenssijulkaisussa
This publication is imported from Aalto University research portal.
View publication in the Research portal (opens in new window)
View/Open full text file from the Research portal (opens in new window)
Other link related to publication (opens in new window)
View publication in the Research portal (opens in new window)
View/Open full text file from the Research portal (opens in new window)
Other link related to publication (opens in new window)
Unless otherwise stated, all rights belong to the author. You may download, display and print this publication for Your own personal use. Commercial use is prohibited.
Date
Major/Subject
Mcode
Degree programme
Language
en
Pages
8
Series
2024 IEEE 20th International Conference on Intelligent Computer Communication And Processing, ICCP 2024, pp. 93-100
Abstract
In the current digital landscape, protecting networks against malicious activities is a critical challenge. Network Intrusion Detection Systems (NIDS) are vital as the first line of defense, continuously monitoring network traffic to detect and prevent potential attacks in real-time. As cyber-attacks get more complex and more similar to normal traffic, robust NIDS solutions have become more crucial than ever. This paper proposes an architecture for an anomaly-based NIDS that has a Multi-Layer Perceptron (MLP) as a binary classifier. The system employs the Cisco TRex generator to simulate network traffic, capturing and analyzing the data using tcpdump and Zeek, and lastly preprocessing it for the MLP using Python scripts. Three algorithms were evaluated for the classification task: Isolation Forest (IF), MLP, and Autoencoder, all implemented with TensorFlow and Keras. The models were trained and tested on two widely recognized datasets for anomaly detection, KDDCUP99 and UNSW-NB15. The experimental results show the superiority of the UNSW-NB15 dataset compared to the KDDCUP99 one in terms of complexity and its likeness to real-world traffic. Moreover, the results also prove that a simple Deep Learning (DL) algorithm such as the MLP can serve as an effective first-line defense against cyber threats. This study contributes to the ongoing development of more effective NIDS by exploring the application of machine learning techniques in anomaly detection, offering the potential for enhancing network security.
Description
Keywords
Other note
Citation
Oroian, D, Bolboaca, R, Roman, A-S & Dobrota, V 2024, Network Intrusion Detection System Using Anomaly Detection Techniques. in S Nedevschi, R Potolea & RR Slavescu (eds), 2024 IEEE 20th International Conference on Intelligent Computer Communication And Processing, ICCP 2024. IEEE, pp. 93-100, International Conference on Intelligent Computer Communication and Processing, Cluj-Napoca, Romania, 17/10/2024. https://doi.org/10.1109/ICCP63557.2024.10793023