A Grassmannian Approach to Zero-Shot Learning for Network Intrusion Detection
One of the main problems in Network Intrusion Detection comes from constant rise of new attacks, so that not enough labeled examples are available for the new classes of attacks. Traditional Machine Learning approaches hardly address such problem. This can be overcome with Zero-Shot Learning, a new approach in the field of Computer Vision, which can be described in two stages: the Attribute Learning and the Inference Stage. The goal of this paper is to propose a new Inference Stage algorithm for Network Intrusion Detection. In order to attain this objective, we firstly put forward an experimental setup for the evaluation of the Zero-Shot Learning in Network Intrusion Detection related tasks. Secondly, a decision tree based algorithm is applied to extract rules for generating the attributes in the AL stage. Finally, using a representation of a Zero-Shot Class as a point in the Grassmann manifold, an explicit formula for the shortest distance between points in that manifold can be used to compute the geodesic distance between the Zero-Shot Classes which represent the new attacks and the Known Classes corresponding to the attack categories. The experimental results in the datasets KDD Cup 99 and NSL-KDD show that our approach with Zero-Shot Learning successfully addresses the Network Intrusion Detection problem.
Code (0)
등록된 구현이 없습니다.
Tasks
AttributeIntrusion DetectionNetwork Intrusion DetectionZero-Shot LearningSimilar Papers 제목 키워드 기반
Tri-LLM Cooperative Federated Zero-Shot Intrusion Detection with Semantic Disagreement and Trust-Aware Aggregation
Federated learning (FL) has become an effective paradigm for privacy-preserving, distributed Intrusion Detection Systems (IDS) in cyber-physical and Internet of Things (IoT) networks, where centralized data aggregation i…
Intrusion DetectionFederated LearningMA-IDS: Multi-Agent RAG Framework for IoT Network Intrusion Detection with an Experience Library
Network Intrusion Detection Systems (NIDS) face important limitations. Signature-based methods are effective for known attack patterns, but they struggle to detect zero-day attacks and often miss modified variants of pre…
Network Intrusion DetectionContinual LearningAttribute Learning for Network Intrusion Detection
Network intrusion detection is one of the most visible uses for Big Data analytics. One of the main problems in this application is the constant rise of new attacks. This scenario, characterized by the fact that not enou…
AttributeIntrusion DetectionNetwork Intrusion DetectionZero-Shot LearningLearning in Multiple Spaces: Few-Shot Network Attack Detection with Metric-Fused Prototypical Networks
Network intrusion detection systems face significant challenges in identifying emerging attack patterns, especially when limited data samples are available. To address this, we propose a novel Multi-Space Prototypical Le…
Intrusion DetectionNetwork Intrusion DetectionLLM-Powered Text-Attributed Graph Anomaly Detection via Retrieval-Augmented Reasoning
Anomaly detection on attributed graphs plays an essential role in applications such as fraud detection, intrusion monitoring, and misinformation analysis. However, text-attributed graphs (TAGs), in which node information…
Graph Anomaly DetectionPrompt EngineeringFraud Detection