Attack classification of an intrusion detection system using deep learning and hyperparameter optimization. (May 2021)

• Record Type: Journal Article
• Authors: Kunang, Yesi Novaria; Nurmaini, Siti; Stiawan, Deris; Suprapto, Bhakti Yudho
• Is Part Of: Journal of information security and applications. Volume 58(2021)
• Publication Date: 2021-05
• Subjects: Intrusion detection system -- Deep learning -- Hyperparameter optimization -- Multiclass classification; Computer security -- Periodicals; Information technology -- Security measures -- Periodicals; 005.805
• DOI: 10.1016/j.jisa.2021.102804
• Languages: English
• ISSNs: 2214-2126

Abstract

Abstract: A network intrusion detection system (NIDS) is a solution that mitigates the threat of attacks on a network. The success of a NIDS depends on the success of its algorithm and the performance of its method in recognizing attacks. We propose a deep learning intrusion detection system (IDS) using a pretraining approach with deep autoencoder (PTDAE) combined with a deep neural network (DNN). Models were developed using hyperparameter optimization procedures. This research provides an alternative solution to deep learning structure models through an automatic hyperparameter optimization process that combines grid search and random search techniques. The automated hyperparameter optimization process helps determine the value of hyperparameters and the best categorical hyperparameter configuration to improve detection performance. The proposed model was tested on the NSL-KDD, and CSE-CIC-ID2018 datasets. In the pretraining phase, we present the results of applying our technique to three feature extraction methods: deep autoencoder (DAE), autoencoder (AE), and stack autoencoder (SAE). The best results are obtained for the DAE method. These performance results also successfully outperform previous approaches in terms of performance metrics in multiclass classification.