paper-with-me

Papers

Deep Q-Learning based Reinforcement Learning Approach for Network Intrusion Detection

2021-11-27 · Hooman Alavizadeh, Julian Jang-Jaccard, Hootan Alavizadeh

The rise of the new generation of cyber threats demands more sophisticated and intelligent cyber defense solutions equipped with autonomous agents capable of learning to make decisions without the knowledge of human experts. Several reinforcement learning methods (e.g., Markov) for automated network intrusion tasks have been proposed in recent years. In this paper, we introduce a new generation of network intrusion detection methods that combines a Q-learning-based reinforcement learning with a deep-feed forward neural network method for network intrusion detection. Our proposed Deep Q-Learning (DQL) model provides an ongoing auto-learning capability for a network environment that can detect different types of network intrusions using an automated trial-error approach and continuously enhance its detection capabilities. We provide the details of fine-tuning different hyperparameters involved in the DQL model for more effective self-learning. According to our extensive experimental results based on the NSL-KDD dataset, we confirm that the lower discount factor which is set as 0.001 under 250 episodes of training yields the best performance results. Our experimental results also show that our proposed DQL is highly effective in detecting different intrusion classes and outperforms other similar machine learning approaches.

📄 PDF Abstract BibTeX arXiv:2111.13978

Code (1)

lamsieh/DQN 공식 구현

Tasks

Intrusion DetectionNetwork Intrusion DetectionQ-Learningreinforcement-learningReinforcement LearningReinforcement Learning (RL)Self-Learning

Methods 이 논문이 사용한 방법론

Q-Learning Q-Learning is an off-policy temporal difference control algorithm: $$Q\left(S\_{t}, A\_{t}\right) \leftarrow Q\left(S\_{t}, A\_{t}\right) + \alpha\left[R_{t+1} +…

Similar Papers 제목 키워드 기반

A Survey for Deep Reinforcement Learning Based Network Intrusion Detection

2024-09-25 · Wanrong Yang, Alberto Acuto, Yihang Zhou, Dominik Wojtczak

Cyber-attacks are becoming increasingly sophisticated and frequent, highlighting the importance of network intrusion detection systems. This paper explores the potential and challenges of using deep reinforcement learnin…

Deep Reinforcement Learningfeature selectionIntrusion DetectionNetwork Intrusion Detection+3

Real-time Network Intrusion Detection via Decision Transformers

2023-12-12 · Jingdi Chen, Hanhan Zhou, Yongsheng Mei, Gina Adam 외

Many cybersecurity problems that require real-time decision-making based on temporal observations can be abstracted as a sequence modeling problem, e.g., network intrusion detection from a sequence of arriving packets. E…

Decision MakingIntrusion DetectionNetwork Intrusion Detectionreinforcement-learning+1

Multi-agent Reinforcement Learning-based Network Intrusion Detection System

2024-07-08 · Amine Tellache, Amdjed Mokhtari, Abdelaziz Amara korba, Yacine Ghamri-Doudane

Intrusion Detection Systems (IDS) play a crucial role in ensuring the security of computer networks. Machine learning has emerged as a popular approach for intrusion detection due to its ability to analyze and detect pat…

Intrusion DetectionMulti-agent Reinforcement LearningNetwork Intrusion Detectionreinforcement-learning+2

A Comparative Analysis of Machine Learning Techniques for IoT Intrusion Detection

2021-11-25 · João Vitorino, Rui Andrade, Isabel Praça, Orlando Sousa 외

The digital transformation faces tremendous security challenges. In particular, the growing number of cyber-attacks targeting Internet of Things (IoT) systems restates the need for a reliable detection of malicious netwo…

Anomaly DetectionBIG-bench Machine LearningDeep Reinforcement LearningIntrusion Detection+4

Cyber-Physical Risk Assessment for False Data Injection Attacks Considering Moving Target Defences

2022-02-22 · Martin Higgins, Wangkun Xu, Fei Teng, Thomas Parisini

In this paper, we examine the factors that influence the success of false data injection (FDI) attacks in the context of both cyber and physical styles of reinforcement. Many works consider the FDI attack in the context …