A hybrid deep learning model for efficient intrusion detection in big data environment

By Mohammad Mehedi Hassan, Abdu H. Gumaei, Ahmed Alsanad, Majed Alrubaian, Giancarlo Fortino. Information Sciences, 2020

330 citations recorded by the source corpus.

Abstract The volume of network and Internet traffic is expanding daily, with data being created at the zettabyte to petabyte scale at an exceptionally high rate. These can be characterized as big data, because they are large in volume, variety, velocity, and veracity. Security threats to networks, the Internet, websites, and organizations are growing alongside this growth in usage. Detecting intrusions in such a big data environment is difficult. Various intrusion-detection systems (IDSs) using artificial intelligence or machine learning have been proposed for different types of network attacks, but most of these systems either cannot recognize unknown attacks or cannot respond to such attacks in real time. Deep learning models, recently applied to large-scale big data analysis, have shown remarkable performance in general but have not been examined for detection of intrusions in a big data environment. This paper proposes a hybrid deep learning model to efficiently detect network intrusions based on a convolutional neural network (CNN) and a weight-dropped, long short-term memory (WDLSTM) network. We use the deep CNN to extract meaningful features from IDS big data and WDLSTM to retain long-term dependencies among extracted features to prevent overfitting on recurrent connections. The proposed hybrid method was compared with traditional approaches in terms of performance on a publicly available dataset, demonstrating its satisfactory performance.

Subfields: Artificial Intelligence, Computer Networks and Communications, Signal Processing

View Paper: https://www.semanticscholar.org/paper/f4c8d877c1419982dbe2d584467666243dec5e64

How researchers see this paper

The researchers whose trusted networks rank it highest, strongest advocate first. Every researcher gets a different order.

In Artificial Intelligence

In Computer Networks and Communications

In Signal Processing

Citations in the corpus

Deep Reinforcement Learning for Cyber Security (2019, background): “[100], support vector machine (SVM) [99], [101], random forest [102], and recently deep learning [103]–[105], however,”
E-GraphSAGE: A Graph Neural Network based Intrusion Detection System for IoT (2021, methodology): “[3] proposed a hybrid deep learning MLbased NIDS using a combination of Convolutional Neural Network (CNN) and Long Short-Term Memory (LSTM) architectures.”