Multi-agent Reinforcement Learning-based Network Intrusion Detection System
Intrusion Detection Systems (IDS) play a crucial role in ensuring the security of computer networks. Machine learning has emerged as a popular approach for intrusion detection due to its ability to analyze and detect patterns in large volumes of data. However, current ML-based IDS solutions often struggle to keep pace with the ever-changing nature of attack patterns and the emergence of new attack types. Additionally, these solutions face challenges related to class imbalance, where the number of instances belonging to different classes (normal and intrusions) is significantly imbalanced, which hinders their ability to effectively detect minor classes. In this paper, we propose a novel multi-agent reinforcement learning (RL) architecture, enabling automatic, efficient, and robust network intrusion detection. To enhance the capabilities of the proposed model, we have improved the DQN algorithm by implementing the weighted mean square loss function and employing cost-sensitive learning techniques. Our solution introduces a resilient architecture designed to accommodate the addition of new attacks and effectively adapt to changes in existing attack patterns. Experimental results realized using CIC-IDS-2017 dataset, demonstrate that our approach can effectively handle the class imbalance problem and provide a fine grained classification of attacks with a very low false positive rate. In comparison to the current state-of-the-art works, our solution demonstrates a significant superiority in both detection rate and false positive rate.
Code (0)
등록된 구현이 없습니다.
Tasks
Intrusion DetectionMulti-agent Reinforcement LearningNetwork Intrusion Detectionreinforcement-learningReinforcement LearningReinforcement Learning (RL)Methods 이 논문이 사용한 방법론
Similar Papers 제목 키워드 기반
Deep Q-Learning based Reinforcement Learning Approach for Network Intrusion Detection
The rise of the new generation of cyber threats demands more sophisticated and intelligent cyber defense solutions equipped with autonomous agents capable of learning to make decisions without the knowledge of human expe…
Intrusion DetectionNetwork Intrusion DetectionQ-Learningreinforcement-learning+3Training Automated Defense Strategies Using Graph-based Cyber Attack Simulations
We implemented and evaluated an automated cyber defense agent. The agent takes security alerts as input and uses reinforcement learning to learn a policy for executing predefined defensive measures. The defender policies…
Intrusion Detectionreinforcement-learningReinforcement LearningMA-IDS: Multi-Agent RAG Framework for IoT Network Intrusion Detection with an Experience Library
Network Intrusion Detection Systems (NIDS) face important limitations. Signature-based methods are effective for known attack patterns, but they struggle to detect zero-day attacks and often miss modified variants of pre…
Network Intrusion DetectionContinual LearningA Survey for Deep Reinforcement Learning Based Network Intrusion Detection
Cyber-attacks are becoming increasingly sophisticated and frequent, highlighting the importance of network intrusion detection systems. This paper explores the potential and challenges of using deep reinforcement learnin…
Deep Reinforcement Learningfeature selectionIntrusion DetectionNetwork Intrusion Detection+3Cyber-Physical Risk Assessment for False Data Injection Attacks Considering Moving Target Defences
In this paper, we examine the factors that influence the success of false data injection (FDI) attacks in the context of both cyber and physical styles of reinforcement. Many works consider the FDI attack in the context …