A new DDoS attacks intrusion detection model based on deep learning for cybersecurity
The data is exposed to many attacks during communication in the network environment. It is becoming increasingly essential to identify intrusions into network communications. Researchers use machine learning techniques to design effective intrusion detection systems. In this study, we proposed an in...
Gespeichert in:
Veröffentlicht in: | Computers & security 2022-07, Vol.118, p.102748, Article 102748 |
---|---|
Hauptverfasser: | , , |
Format: | Artikel |
Sprache: | eng |
Schlagworte: | |
Online-Zugang: | Volltext |
Tags: |
Tag hinzufügen
Keine Tags, Fügen Sie den ersten Tag hinzu!
|
container_end_page | |
---|---|
container_issue | |
container_start_page | 102748 |
container_title | Computers & security |
container_volume | 118 |
creator | Akgun, Devrim Hizal, Selman Cavusoglu, Unal |
description | The data is exposed to many attacks during communication in the network environment. It is becoming increasingly essential to identify intrusions into network communications. Researchers use machine learning techniques to design effective intrusion detection systems. In this study, we proposed an intrusion detection system that includes preprocessing procedures and a deep learning model to detect DDoS attacks. For this purpose, various models based on Deep Neural Networks (DNN), Convolutional Neural Networks (CNN), and Long Short Term Memory (LSTM) have been evaluated in terms of detection performance and real-time performance. We tested the suggested model using the CIC-DDoS2019 dataset, which is frequently used in the literature. We applied preprocess techniques such as feature elimination, random subset selection, feature selection, duplication removal, and normalization to the CIC-DDoS2019 dataset. As a result, better recognition performance was obtained for the training and testing evaluations. According to the test results, 99.99% for binary and 99.30% for multiclass accuracy using the CNN-based inception like model gave the best results among the proposed models. Also, the inference time of the proposed model for various sizes of test data looks promising compared to baseline models with a smaller number of trainable parameters. The proposed IDS system, together with the preprocessing methods, provides better results when compared to state-of-the-art studies. |
doi_str_mv | 10.1016/j.cose.2022.102748 |
format | Article |
fullrecord | <record><control><sourceid>proquest_cross</sourceid><recordid>TN_cdi_proquest_journals_2688596588</recordid><sourceformat>XML</sourceformat><sourcesystem>PC</sourcesystem><els_id>S0167404822001432</els_id><sourcerecordid>2688596588</sourcerecordid><originalsourceid>FETCH-LOGICAL-c258t-b8cfdfaf06216cdd061a6e2b360b9de8f5b31ef02060ecfb04e722dfc08401ee3</originalsourceid><addsrcrecordid>eNp9kMtOwzAQRS0EEqXwA6wssU4Zu4njSmyqlpdUiQV0bSX2GDm0cbEdUP-ehLBmNaOZe-dxCLlmMGPAxG0z0z7ijAPnfYGXuTwhEyZLngkO8pRMelGZ5ZDLc3IRYwPASiHlhGyXtMVvul77V1qlVOmPSF2bQhedb6nBhDoN2d4b3NG6imjobwMPdIdVaF37Tq0PVB9rDBF1F1w6XpIzW-0iXv3FKdk-3L-tnrLNy-PzarnJNC9kymqprbGVBcGZ0MaAYJVAXs8F1AuD0hb1nKEFDgJQ2xpyLDk3VoPMgSHOp-RmnHsI_rPDmFTju9D2KxXv3ysWopCyV_FRpYOPMaBVh-D2VTgqBmrApxo14FMDPjXi6013own7-78cBhW1w1ajcaFnoox3_9l_AAogeaY</addsrcrecordid><sourcetype>Aggregation Database</sourcetype><iscdi>true</iscdi><recordtype>article</recordtype><pqid>2688596588</pqid></control><display><type>article</type><title>A new DDoS attacks intrusion detection model based on deep learning for cybersecurity</title><source>Access via ScienceDirect (Elsevier)</source><creator>Akgun, Devrim ; Hizal, Selman ; Cavusoglu, Unal</creator><creatorcontrib>Akgun, Devrim ; Hizal, Selman ; Cavusoglu, Unal</creatorcontrib><description>The data is exposed to many attacks during communication in the network environment. It is becoming increasingly essential to identify intrusions into network communications. Researchers use machine learning techniques to design effective intrusion detection systems. In this study, we proposed an intrusion detection system that includes preprocessing procedures and a deep learning model to detect DDoS attacks. For this purpose, various models based on Deep Neural Networks (DNN), Convolutional Neural Networks (CNN), and Long Short Term Memory (LSTM) have been evaluated in terms of detection performance and real-time performance. We tested the suggested model using the CIC-DDoS2019 dataset, which is frequently used in the literature. We applied preprocess techniques such as feature elimination, random subset selection, feature selection, duplication removal, and normalization to the CIC-DDoS2019 dataset. As a result, better recognition performance was obtained for the training and testing evaluations. According to the test results, 99.99% for binary and 99.30% for multiclass accuracy using the CNN-based inception like model gave the best results among the proposed models. Also, the inference time of the proposed model for various sizes of test data looks promising compared to baseline models with a smaller number of trainable parameters. The proposed IDS system, together with the preprocessing methods, provides better results when compared to state-of-the-art studies.</description><identifier>ISSN: 0167-4048</identifier><identifier>EISSN: 1872-6208</identifier><identifier>DOI: 10.1016/j.cose.2022.102748</identifier><language>eng</language><publisher>Amsterdam: Elsevier Ltd</publisher><subject>Artificial neural networks ; Cloud security ; Cybersecurity ; Data preprocessing ; Datasets ; DDoS ; Deep learning ; Denial of service attacks ; Intrusion detection system ; Intrusion detection systems ; Machine learning ; Neural networks ; Preprocessing ; State-of-the-art reviews ; System effectiveness</subject><ispartof>Computers & security, 2022-07, Vol.118, p.102748, Article 102748</ispartof><rights>2022 Elsevier Ltd</rights><rights>Copyright Elsevier Sequoia S.A. Jul 2022</rights><lds50>peer_reviewed</lds50><woscitedreferencessubscribed>false</woscitedreferencessubscribed><citedby>FETCH-LOGICAL-c258t-b8cfdfaf06216cdd061a6e2b360b9de8f5b31ef02060ecfb04e722dfc08401ee3</citedby><cites>FETCH-LOGICAL-c258t-b8cfdfaf06216cdd061a6e2b360b9de8f5b31ef02060ecfb04e722dfc08401ee3</cites><orcidid>0000-0002-0770-599X</orcidid></display><links><openurl>$$Topenurl_article</openurl><openurlfulltext>$$Topenurlfull_article</openurlfulltext><thumbnail>$$Tsyndetics_thumb_exl</thumbnail><linktohtml>$$Uhttps://dx.doi.org/10.1016/j.cose.2022.102748$$EHTML$$P50$$Gelsevier$$H</linktohtml><link.rule.ids>314,780,784,3550,27924,27925,45995</link.rule.ids></links><search><creatorcontrib>Akgun, Devrim</creatorcontrib><creatorcontrib>Hizal, Selman</creatorcontrib><creatorcontrib>Cavusoglu, Unal</creatorcontrib><title>A new DDoS attacks intrusion detection model based on deep learning for cybersecurity</title><title>Computers & security</title><description>The data is exposed to many attacks during communication in the network environment. It is becoming increasingly essential to identify intrusions into network communications. Researchers use machine learning techniques to design effective intrusion detection systems. In this study, we proposed an intrusion detection system that includes preprocessing procedures and a deep learning model to detect DDoS attacks. For this purpose, various models based on Deep Neural Networks (DNN), Convolutional Neural Networks (CNN), and Long Short Term Memory (LSTM) have been evaluated in terms of detection performance and real-time performance. We tested the suggested model using the CIC-DDoS2019 dataset, which is frequently used in the literature. We applied preprocess techniques such as feature elimination, random subset selection, feature selection, duplication removal, and normalization to the CIC-DDoS2019 dataset. As a result, better recognition performance was obtained for the training and testing evaluations. According to the test results, 99.99% for binary and 99.30% for multiclass accuracy using the CNN-based inception like model gave the best results among the proposed models. Also, the inference time of the proposed model for various sizes of test data looks promising compared to baseline models with a smaller number of trainable parameters. The proposed IDS system, together with the preprocessing methods, provides better results when compared to state-of-the-art studies.</description><subject>Artificial neural networks</subject><subject>Cloud security</subject><subject>Cybersecurity</subject><subject>Data preprocessing</subject><subject>Datasets</subject><subject>DDoS</subject><subject>Deep learning</subject><subject>Denial of service attacks</subject><subject>Intrusion detection system</subject><subject>Intrusion detection systems</subject><subject>Machine learning</subject><subject>Neural networks</subject><subject>Preprocessing</subject><subject>State-of-the-art reviews</subject><subject>System effectiveness</subject><issn>0167-4048</issn><issn>1872-6208</issn><fulltext>true</fulltext><rsrctype>article</rsrctype><creationdate>2022</creationdate><recordtype>article</recordtype><recordid>eNp9kMtOwzAQRS0EEqXwA6wssU4Zu4njSmyqlpdUiQV0bSX2GDm0cbEdUP-ehLBmNaOZe-dxCLlmMGPAxG0z0z7ijAPnfYGXuTwhEyZLngkO8pRMelGZ5ZDLc3IRYwPASiHlhGyXtMVvul77V1qlVOmPSF2bQhedb6nBhDoN2d4b3NG6imjobwMPdIdVaF37Tq0PVB9rDBF1F1w6XpIzW-0iXv3FKdk-3L-tnrLNy-PzarnJNC9kymqprbGVBcGZ0MaAYJVAXs8F1AuD0hb1nKEFDgJQ2xpyLDk3VoPMgSHOp-RmnHsI_rPDmFTju9D2KxXv3ysWopCyV_FRpYOPMaBVh-D2VTgqBmrApxo14FMDPjXi6013own7-78cBhW1w1ajcaFnoox3_9l_AAogeaY</recordid><startdate>202207</startdate><enddate>202207</enddate><creator>Akgun, Devrim</creator><creator>Hizal, Selman</creator><creator>Cavusoglu, Unal</creator><general>Elsevier Ltd</general><general>Elsevier Sequoia S.A</general><scope>AAYXX</scope><scope>CITATION</scope><scope>7SC</scope><scope>8FD</scope><scope>JQ2</scope><scope>K7.</scope><scope>L7M</scope><scope>L~C</scope><scope>L~D</scope><orcidid>https://orcid.org/0000-0002-0770-599X</orcidid></search><sort><creationdate>202207</creationdate><title>A new DDoS attacks intrusion detection model based on deep learning for cybersecurity</title><author>Akgun, Devrim ; Hizal, Selman ; Cavusoglu, Unal</author></sort><facets><frbrtype>5</frbrtype><frbrgroupid>cdi_FETCH-LOGICAL-c258t-b8cfdfaf06216cdd061a6e2b360b9de8f5b31ef02060ecfb04e722dfc08401ee3</frbrgroupid><rsrctype>articles</rsrctype><prefilter>articles</prefilter><language>eng</language><creationdate>2022</creationdate><topic>Artificial neural networks</topic><topic>Cloud security</topic><topic>Cybersecurity</topic><topic>Data preprocessing</topic><topic>Datasets</topic><topic>DDoS</topic><topic>Deep learning</topic><topic>Denial of service attacks</topic><topic>Intrusion detection system</topic><topic>Intrusion detection systems</topic><topic>Machine learning</topic><topic>Neural networks</topic><topic>Preprocessing</topic><topic>State-of-the-art reviews</topic><topic>System effectiveness</topic><toplevel>peer_reviewed</toplevel><toplevel>online_resources</toplevel><creatorcontrib>Akgun, Devrim</creatorcontrib><creatorcontrib>Hizal, Selman</creatorcontrib><creatorcontrib>Cavusoglu, Unal</creatorcontrib><collection>CrossRef</collection><collection>Computer and Information Systems Abstracts</collection><collection>Technology Research Database</collection><collection>ProQuest Computer Science Collection</collection><collection>ProQuest Criminal Justice (Alumni)</collection><collection>Advanced Technologies Database with Aerospace</collection><collection>Computer and Information Systems Abstracts Academic</collection><collection>Computer and Information Systems Abstracts Professional</collection><jtitle>Computers & security</jtitle></facets><delivery><delcategory>Remote Search Resource</delcategory><fulltext>fulltext</fulltext></delivery><addata><au>Akgun, Devrim</au><au>Hizal, Selman</au><au>Cavusoglu, Unal</au><format>journal</format><genre>article</genre><ristype>JOUR</ristype><atitle>A new DDoS attacks intrusion detection model based on deep learning for cybersecurity</atitle><jtitle>Computers & security</jtitle><date>2022-07</date><risdate>2022</risdate><volume>118</volume><spage>102748</spage><pages>102748-</pages><artnum>102748</artnum><issn>0167-4048</issn><eissn>1872-6208</eissn><abstract>The data is exposed to many attacks during communication in the network environment. It is becoming increasingly essential to identify intrusions into network communications. Researchers use machine learning techniques to design effective intrusion detection systems. In this study, we proposed an intrusion detection system that includes preprocessing procedures and a deep learning model to detect DDoS attacks. For this purpose, various models based on Deep Neural Networks (DNN), Convolutional Neural Networks (CNN), and Long Short Term Memory (LSTM) have been evaluated in terms of detection performance and real-time performance. We tested the suggested model using the CIC-DDoS2019 dataset, which is frequently used in the literature. We applied preprocess techniques such as feature elimination, random subset selection, feature selection, duplication removal, and normalization to the CIC-DDoS2019 dataset. As a result, better recognition performance was obtained for the training and testing evaluations. According to the test results, 99.99% for binary and 99.30% for multiclass accuracy using the CNN-based inception like model gave the best results among the proposed models. Also, the inference time of the proposed model for various sizes of test data looks promising compared to baseline models with a smaller number of trainable parameters. The proposed IDS system, together with the preprocessing methods, provides better results when compared to state-of-the-art studies.</abstract><cop>Amsterdam</cop><pub>Elsevier Ltd</pub><doi>10.1016/j.cose.2022.102748</doi><orcidid>https://orcid.org/0000-0002-0770-599X</orcidid></addata></record> |
fulltext | fulltext |
identifier | ISSN: 0167-4048 |
ispartof | Computers & security, 2022-07, Vol.118, p.102748, Article 102748 |
issn | 0167-4048 1872-6208 |
language | eng |
recordid | cdi_proquest_journals_2688596588 |
source | Access via ScienceDirect (Elsevier) |
subjects | Artificial neural networks Cloud security Cybersecurity Data preprocessing Datasets DDoS Deep learning Denial of service attacks Intrusion detection system Intrusion detection systems Machine learning Neural networks Preprocessing State-of-the-art reviews System effectiveness |
title | A new DDoS attacks intrusion detection model based on deep learning for cybersecurity |
url | https://sfx.bib-bvb.de/sfx_tum?ctx_ver=Z39.88-2004&ctx_enc=info:ofi/enc:UTF-8&ctx_tim=2024-12-28T19%3A06%3A32IST&url_ver=Z39.88-2004&url_ctx_fmt=infofi/fmt:kev:mtx:ctx&rfr_id=info:sid/primo.exlibrisgroup.com:primo3-Article-proquest_cross&rft_val_fmt=info:ofi/fmt:kev:mtx:journal&rft.genre=article&rft.atitle=A%20new%20DDoS%20attacks%20intrusion%20detection%20model%20based%20on%20deep%20learning%20for%20cybersecurity&rft.jtitle=Computers%20&%20security&rft.au=Akgun,%20Devrim&rft.date=2022-07&rft.volume=118&rft.spage=102748&rft.pages=102748-&rft.artnum=102748&rft.issn=0167-4048&rft.eissn=1872-6208&rft_id=info:doi/10.1016/j.cose.2022.102748&rft_dat=%3Cproquest_cross%3E2688596588%3C/proquest_cross%3E%3Curl%3E%3C/url%3E&disable_directlink=true&sfx.directlink=off&sfx.report_link=0&rft_id=info:oai/&rft_pqid=2688596588&rft_id=info:pmid/&rft_els_id=S0167404822001432&rfr_iscdi=true |