Deep Reinforcement Learning-Based Asymmetric Convolutional Autoencoder for Intrusion Detection

Q3 Decision Sciences
Yuqin Dai;Xinjie Qian;Chunmei Yang
{"title":"Deep Reinforcement Learning-Based Asymmetric Convolutional Autoencoder for Intrusion Detection","authors":"Yuqin Dai;Xinjie Qian;Chunmei Yang","doi":"10.13052/jicts2245-800X.1314","DOIUrl":null,"url":null,"abstract":"In recent years, intrusion detection systems (IDSs) have become a critical component of network security, due to the growing number and complexity of cyber-attacks. Traditional IDS methods, including signature-based and anomaly-based detection, often struggle with the high-dimensional and imbalanced nature of network traffic, leading to suboptimal performance. Moreover, many existing models fail to efficiently handle the diverse and complex attack types. In response to these challenges, we propose a novel deep learning-based IDS framework that leverages a deep asymmetric convolutional autoencoder (DACA) architecture. Our model combines advanced techniques for feature extraction, dimensionality reduction, and anomaly detection into a single cohesive framework. The DACA model is designed to effectively capture complex patterns and subtle anomalies in network traffic while significantly reducing computational complexity. By employing this architecture, we achieve superior detection accuracy across various types of attacks even in imbalanced datasets. Experimental results demonstrate that our approach surpasses several state-of-the-art methods, including HCM-SVM, D1-IDDS, and GNN -IDS, achieving high accuracy, precision, recall, and F1-score on benchmark datasets such as NSL-KDD and UNSW-NB15. The results emphasize how effectively our model identifies complex and varied attack patterns. In conclusion, the proposed IDS model offers a promising solution to the limitations of current detection systems, with significant improvements in performance and efficiency. This approach contributes to advancing the development of robust and scalable network security solutions.","PeriodicalId":36697,"journal":{"name":"Journal of ICT Standardization","volume":"13 1","pages":"67-92"},"PeriodicalIF":0.0000,"publicationDate":"2025-03-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"https://ieeexplore.ieee.org/stamp/stamp.jsp?tp=&arnumber=11042904","citationCount":"0","resultStr":null,"platform":"Semanticscholar","paperid":null,"PeriodicalName":"Journal of ICT Standardization","FirstCategoryId":"1085","ListUrlMain":"https://ieeexplore.ieee.org/document/11042904/","RegionNum":0,"RegionCategory":null,"ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":null,"EPubDate":"","PubModel":"","JCR":"Q3","JCRName":"Decision Sciences","Score":null,"Total":0}
引用次数: 0

Abstract

In recent years, intrusion detection systems (IDSs) have become a critical component of network security, due to the growing number and complexity of cyber-attacks. Traditional IDS methods, including signature-based and anomaly-based detection, often struggle with the high-dimensional and imbalanced nature of network traffic, leading to suboptimal performance. Moreover, many existing models fail to efficiently handle the diverse and complex attack types. In response to these challenges, we propose a novel deep learning-based IDS framework that leverages a deep asymmetric convolutional autoencoder (DACA) architecture. Our model combines advanced techniques for feature extraction, dimensionality reduction, and anomaly detection into a single cohesive framework. The DACA model is designed to effectively capture complex patterns and subtle anomalies in network traffic while significantly reducing computational complexity. By employing this architecture, we achieve superior detection accuracy across various types of attacks even in imbalanced datasets. Experimental results demonstrate that our approach surpasses several state-of-the-art methods, including HCM-SVM, D1-IDDS, and GNN -IDS, achieving high accuracy, precision, recall, and F1-score on benchmark datasets such as NSL-KDD and UNSW-NB15. The results emphasize how effectively our model identifies complex and varied attack patterns. In conclusion, the proposed IDS model offers a promising solution to the limitations of current detection systems, with significant improvements in performance and efficiency. This approach contributes to advancing the development of robust and scalable network security solutions.
基于深度强化学习的非对称卷积自编码器入侵检测
近年来,由于网络攻击的数量和复杂性不断增加,入侵检测系统(ids)已成为网络安全的重要组成部分。传统的入侵检测方法,包括基于签名的检测和基于异常的检测,经常与网络流量的高维和不平衡特性作斗争,导致性能不佳。此外,现有的许多模型无法有效地处理各种复杂的攻击类型。为了应对这些挑战,我们提出了一种新的基于深度学习的IDS框架,该框架利用了深度非对称卷积自编码器(DACA)架构。我们的模型将特征提取、降维和异常检测的先进技术结合到一个单一的内聚框架中。DACA模型旨在有效地捕获网络流量中的复杂模式和微妙异常,同时显着降低计算复杂性。通过采用这种架构,即使在不平衡的数据集中,我们也能在各种类型的攻击中实现更高的检测精度。实验结果表明,我们的方法超越了几种最先进的方法,包括HCM-SVM, D1-IDDS和GNN -IDS,在NSL-KDD和UNSW-NB15等基准数据集上实现了较高的准确度,精密度,召回率和f1分数。结果强调了我们的模型如何有效地识别复杂和多样的攻击模式。总之,所提出的IDS模型为解决当前检测系统的局限性提供了一个有希望的解决方案,在性能和效率方面都有显着提高。这种方法有助于推进健壮且可扩展的网络安全解决方案的开发。
本文章由计算机程序翻译,如有差异,请以英文原文为准。
求助全文
约1分钟内获得全文 求助全文
来源期刊
Journal of ICT Standardization
Journal of ICT Standardization Computer Science-Information Systems
CiteScore
2.20
自引率
0.00%
发文量
18
×
引用
GB/T 7714-2015
复制
MLA
复制
APA
复制
导出至
BibTeX EndNote RefMan NoteFirst NoteExpress
×
提示
您的信息不完整,为了账户安全,请先补充。
现在去补充
×
提示
您因"违规操作"
具体请查看互助需知
我知道了
×
提示
确定
请完成安全验证×
copy
已复制链接
快去分享给好友吧!
我知道了
右上角分享
点击右上角分享
0
联系我们:info@booksci.cn Book学术提供免费学术资源搜索服务,方便国内外学者检索中英文文献。致力于提供最便捷和优质的服务体验。 Copyright © 2023 布克学术 All rights reserved.
京ICP备2023020795号-1
ghs 京公网安备 11010802042870号
Book学术文献互助
Book学术文献互助群
群 号:604180095
Book学术官方微信