The Effective Methods for Intrusion Detection With Limited Network Attack Data: Multi-Task Learning and Oversampling
Recently, many anomaly intrusion detection algorithms have been developed and applied in network security. These algorithms achieve high detection rate on many classical datasets. However, most of them failed to address two challenges: 1) imbalanced trafc data with limited network attack, 2) multiple data sources that are distributed in different terminals. In detail, those algorithms assume that there are sufcient network trafc data to train their models for intrusion detection. Due to the network attack trafc is always scarce in the real-world network, this assumption is difcult to satisfy in most cases. In this paper, we use Multi-Task Learning (MTL) and oversampling methods to address those challenges of network intrusion detection. Firstly, we use the MTL method to treat each terminal as a single task, and then use relevant information between different terminals to help learn every single task. Meanwhile, we use the oversampling method to overcome the minority problem of attacks. Through a series of experiments on the latest UNSWNB15 and CICIDS2018 datasets, this paper veries the effectiveness of MTL and oversampling methods for network intrusion detection with limited network attack data, where they achieve more than 90% detection rate in different experimental settings.
Code (0)
등록된 구현이 없습니다.
Tasks
Intrusion DetectionMulti-Task LearningNetwork Intrusion DetectionSimilar Papers 제목 키워드 기반
A Novel SDN Dataset for Intrusion Detection in IoT Networks
The number of Internet of Things (IoT) devices and the use cases they aim to support have increased sharply in the past decade with the rapid developments in wireless networking infrastructures. Despite many advantages, …
Intrusion DetectionAMDS: Attack-Aware Multi-Stage Defense System for Network Intrusion Detection with Two-Stage Adaptive Weight Learning
Machine learning based network intrusion detection systems are vulnerable to adversarial attacks that degrade classification performance under both gradient-based and distribution shift threat models. Existing defenses t…
Network Intrusion DetectionAdversarial RobustnessAdversarial AttackInvestigating Resistance of Deep Learning-based IDS against Adversaries using min-max Optimization
With the growth of adversarial attacks against machine learning models, several concerns have emerged about potential vulnerabilities in designing deep neural network-based intrusion detection systems (IDS). In this pape…
Adversarial AttackIntrusion DetectionCyber Intrusion Detection by Using Deep Neural Networks with Attack-sharing Loss
Cyber attacks pose crucial threats to computer system security, and put digital treasuries at excessive risks. This leads to an urgent call for an effective intrusion detection system that can identify the intrusion atta…
General ClassificationIntrusion DetectionMA-IDS: Multi-Agent RAG Framework for IoT Network Intrusion Detection with an Experience Library
Network Intrusion Detection Systems (NIDS) face important limitations. Signature-based methods are effective for known attack patterns, but they struggle to detect zero-day attacks and often miss modified variants of pre…
Network Intrusion DetectionContinual Learning