Recurrent deep learning-based feature fusion ensemble meta-classifier approach for intelligent network intrusion detection system. (September 2022)

• Record Type: Journal Article
• Authors: Ravi, Vinayakumar; Chaganti, Rajasekhar; Alazab, Mamoun
• Is Part Of: Computers & electrical engineering. Volume 102(2022)
• Publication Date: 2022-09
• Subjects: Cyber–physical systems -- Cyberattacks -- Cybercrime -- Intrusion detection -- Recurrent model -- Deep learning -- Feature fusion -- Meta-classifier; Computer engineering -- Periodicals; Electrical engineering -- Periodicals; Electrical engineering -- Data processing -- Periodicals; Ordinateurs -- Conception et construction -- Périodiques; Électrotechnique -- Périodiques; Électrotechnique -- Informatique -- Périodiques; Computer engineering; Electrical engineering; Electrical engineering -- Data processing; Periodicals; Electronic journals; 621.302854
• DOI: 10.1016/j.compeleceng.2022.108156
• Languages: English
• ISSNs: 0045-7906

Abstract

Abstract: This work proposes an end-to-end model for network attack detection and network attack classification using deep learning-based recurrent models. The proposed model extracts the features of hidden layers of recurrent models and further employs a kernel-based principal component analysis (KPCA) feature selection approach to identify optimal features. Finally, the optimal features of recurrent models are fused together and classification is done using an ensemble meta-classifier. Experimental analysis and results of the proposed method on more than one benchmark network intrusion dataset show that the proposed method performed better than the existing methods and other most commonly used machine learning and deep learning models. In particular, the proposed method showed maximum accuracy 99% in network attacks detection and 97% network attacks classification using the SDN-IoT dataset. Similar performances were obtained by the proposed model on other network intrusion datasets such as KDD-Cup-1999, UNSW-NB15, WSN-DS, and CICIDS-2017. Graphical abstract: Highlights: Recurrent model's hidden layers feature fusion for network intrusion detection. Ensemble meta-classifiers for network intrusion detection and classification. Evaluation of models are shown on more than one network intrusion dataset. Feature visualization using t-distributed stochastic neighbor embedding (t-SNE).