Improving Intrusion Detection with Domain-Invariant Representation Learning in Latent Space
Domain generalization focuses on leveraging knowledge from multiple related domains with ample training data and labels to enhance inference on unseen in-distribution (IN) and out-of-distribution (OOD) domains. In our study, we introduce a two-phase representation learning technique using multi-task learning. This approach aims to cultivate a latent space from features spanning multiple domains, encompassing both native and cross-domains, to amplify generalization to IN and OOD territories. Additionally, we attempt to disentangle the latent space by minimizing the mutual information between the prior and latent space, effectively de-correlating spurious feature correlations. Collectively, the joint optimization will facilitate domain-invariant feature learning. We assess the model's efficacy across multiple cybersecurity datasets, using standard classification metrics on both unseen IN and OOD sets, and juxtapose the results with contemporary domain generalization methods.
Code (0)
등록된 구현이 없습니다.
Tasks
Domain GeneralizationIntrusion DetectionMulti-Task LearningRepresentation LearningSimilar Papers 제목 키워드 기반
DI-NIDS: Domain Invariant Network Intrusion Detection System
The performance of machine learning based network intrusion detection systems (NIDSs) severely degrades when deployed on a network with significantly different feature distributions from the ones of the training dataset.…
Domain AdaptationIntrusion DetectionNetwork Intrusion DetectionJoint Semantic Transfer Network for IoT Intrusion Detection
In this paper, we propose a Joint Semantic Transfer Network (JSTN) towards effective intrusion detection for large-scale scarcely labelled IoT domain. As a multi-source heterogeneous domain adaptation (MS-HDA) method, th…
Computational EfficiencyDomain AdaptationIntrusion DetectionPseudo Label+1Trustworthy Intrusion Detection: Confidence Estimation Using Latent Space
This work introduces a novel method for enhancing confidence in anomaly detection in Intrusion Detection Systems (IDS) through the use of a Variational Autoencoder (VAE) architecture. By developing a confidence metric de…
Anomaly DetectionBinary ClassificationIntrusion DetectionClustering-Enhanced Domain Adaptation for Cross-Domain Intrusion Detection in Industrial Control Systems
Industrial control systems operate in dynamic environments where traffic distributions vary across scenarios, labeled samples are limited, and unknown attacks frequently emerge, posing significant challenges to cross-dom…
Dimensionality ReductionIntrusion DetectionTransfer LearningDomain AdaptationMAGE-ID: A Multimodal Generative Framework for Intrusion Detection Systems
Modern Intrusion Detection Systems (IDS) face severe challenges due to heterogeneous network traffic, evolving cyber threats, and pronounced data imbalance between benign and attack flows. While generative models have sh…
Intrusion DetectionData Augmentation