A Protocol-based Intrusion Detection System using Dual Autoencoders

Yu Lun Huang, Ching Yu Hung, Hsiao Te Hu

Research output: Chapter in Book/Report/Conference proceedingConference contributionpeer-review

3 Scopus citations

Abstract

This paper proposes a dual Autoencoder-based Intrusion Detection System (duAE-IDS) for the ever-changing network attacks. duAE-IDS is a protocol-based IDS, which divides traffic by its application-layer protocol. duAE-IDS determines the traffic's abnormality by considering both the criteria and the application-layer protocol. The criteria are obtained by training our neural network model (duAE model) with traffic containing only one type of application-layer protocol. duAE-IDS represents each traffic flow with 67 features with eight new features for TCP traffic to improve detection accuracy. duAE-Idsuses two sparse autoencoders and one 1D CNN to extract features from traffic for every application-layer protocol. We conduct several experiments to prove the abilities and flexibilities of duAE-IDS. We prove that duAE-Idstrained with the known datasets can reach an F1-score of 0.87 for detecting attack traffic in an unknown network. We can run duAE-Idsin any network without pre-collecting the traffic of the network.

Original languageEnglish
Title of host publicationProceedings - 2021 21st International Conference on Software Quality, Reliability and Security, QRS 2021
PublisherInstitute of Electrical and Electronics Engineers
Pages749-758
Number of pages10
ISBN (Electronic)9781665458139
DOIs
StatePublished - 2021
Event21st International Conference on Software Quality, Reliability and Security, QRS 2021 - Hainan, China
Duration: 6 Dec 202110 Dec 2021

Publication series

NameIEEE International Conference on Software Quality, Reliability and Security, QRS
Volume2021-December
ISSN (Print)2693-9177

Conference

Conference21st International Conference on Software Quality, Reliability and Security, QRS 2021
Country/TerritoryChina
CityHainan
Period6/12/2110/12/21

Keywords

  • Autoen-coder
  • Feature Extraction
  • Intrusion Detection
  • Sparse Autoencoder

Fingerprint

Dive into the research topics of 'A Protocol-based Intrusion Detection System using Dual Autoencoders'. Together they form a unique fingerprint.

Cite this