Model of the intrusion detection system based on the integration of spatial-temporal features. Issue 89 (February 2020)

• Record Type: Journal Article
• Authors: Zhang, Jianwu; Ling, Yu; Fu, Xingbing; Yang, Xiongkun; Xiong, Gang; Zhang, Rui
• Is Part Of: Computers & security. Issue 89(2020)
• Publication Date: 2020-02
• Subjects: Intrusion detection system -- Long short-term memory -- Multiscale convolutional neural network -- Spatial-temporal features -- UNSW-NB15; Computer security -- Periodicals; Electronic data processing departments -- Security measures -- Periodicals; 005.805
• DOI: 10.1016/j.cose.2019.101681
• Languages: English
• ISSNs: 0167-4048

Abstract

Abstract: The intrusion detection system can distinguish normal traffic from attack traffic by analyzing the characteristics of network traffic. Recently, neural networks have advanced in the fields of natural language processing, computer vision, intrusion detection and so on. In this paper, we propose a unified model combining Multiscale Convolutional Neural Network with Long Short-Term Memory (MSCNN-LSTM). The model first employs Multiscale Convolutional Neural Network(MSCNN) to analyze the spatial features of the dataset, and then employs Long Short-Term Memory (LSTM) Network to process the temporal features. Finally, the model employs the spatial-temporal features to perform the classification. In the experiment, the public intrusion detection dataset, UNSW-NB15 was employed as experimental training set and test set. Compared with the model based on the conventional neural networks, the MSCNN-LSTM model has better accuracy, false alarm rate and false negative rate.