A new DDoS attacks intrusion detection model based on deep learning for cybersecurity

The data is exposed to many attacks during communication in the network environment. It is becoming increasingly essential to identify intrusions into network communications. Researchers use machine learning techniques to design effective intrusion detection systems. In this study, we proposed an in...

Ausführliche Beschreibung

Gespeichert in:
Bibliographische Detailangaben
Veröffentlicht in:Computers & security 2022-07, Vol.118, p.102748, Article 102748
Hauptverfasser: Akgun, Devrim, Hizal, Selman, Cavusoglu, Unal
Format: Artikel
Sprache:eng
Schlagworte:
Online-Zugang:Volltext
Tags: Tag hinzufügen
Keine Tags, Fügen Sie den ersten Tag hinzu!
container_end_page
container_issue
container_start_page 102748
container_title Computers & security
container_volume 118
creator Akgun, Devrim
Hizal, Selman
Cavusoglu, Unal
description The data is exposed to many attacks during communication in the network environment. It is becoming increasingly essential to identify intrusions into network communications. Researchers use machine learning techniques to design effective intrusion detection systems. In this study, we proposed an intrusion detection system that includes preprocessing procedures and a deep learning model to detect DDoS attacks. For this purpose, various models based on Deep Neural Networks (DNN), Convolutional Neural Networks (CNN), and Long Short Term Memory (LSTM) have been evaluated in terms of detection performance and real-time performance. We tested the suggested model using the CIC-DDoS2019 dataset, which is frequently used in the literature. We applied preprocess techniques such as feature elimination, random subset selection, feature selection, duplication removal, and normalization to the CIC-DDoS2019 dataset. As a result, better recognition performance was obtained for the training and testing evaluations. According to the test results, 99.99% for binary and 99.30% for multiclass accuracy using the CNN-based inception like model gave the best results among the proposed models. Also, the inference time of the proposed model for various sizes of test data looks promising compared to baseline models with a smaller number of trainable parameters. The proposed IDS system, together with the preprocessing methods, provides better results when compared to state-of-the-art studies.
doi_str_mv 10.1016/j.cose.2022.102748
format Article
fullrecord <record><control><sourceid>proquest_cross</sourceid><recordid>TN_cdi_proquest_journals_2688596588</recordid><sourceformat>XML</sourceformat><sourcesystem>PC</sourcesystem><els_id>S0167404822001432</els_id><sourcerecordid>2688596588</sourcerecordid><originalsourceid>FETCH-LOGICAL-c258t-b8cfdfaf06216cdd061a6e2b360b9de8f5b31ef02060ecfb04e722dfc08401ee3</originalsourceid><addsrcrecordid>eNp9kMtOwzAQRS0EEqXwA6wssU4Zu4njSmyqlpdUiQV0bSX2GDm0cbEdUP-ehLBmNaOZe-dxCLlmMGPAxG0z0z7ijAPnfYGXuTwhEyZLngkO8pRMelGZ5ZDLc3IRYwPASiHlhGyXtMVvul77V1qlVOmPSF2bQhedb6nBhDoN2d4b3NG6imjobwMPdIdVaF37Tq0PVB9rDBF1F1w6XpIzW-0iXv3FKdk-3L-tnrLNy-PzarnJNC9kymqprbGVBcGZ0MaAYJVAXs8F1AuD0hb1nKEFDgJQ2xpyLDk3VoPMgSHOp-RmnHsI_rPDmFTju9D2KxXv3ysWopCyV_FRpYOPMaBVh-D2VTgqBmrApxo14FMDPjXi6013own7-78cBhW1w1ajcaFnoox3_9l_AAogeaY</addsrcrecordid><sourcetype>Aggregation Database</sourcetype><iscdi>true</iscdi><recordtype>article</recordtype><pqid>2688596588</pqid></control><display><type>article</type><title>A new DDoS attacks intrusion detection model based on deep learning for cybersecurity</title><source>Access via ScienceDirect (Elsevier)</source><creator>Akgun, Devrim ; Hizal, Selman ; Cavusoglu, Unal</creator><creatorcontrib>Akgun, Devrim ; Hizal, Selman ; Cavusoglu, Unal</creatorcontrib><description>The data is exposed to many attacks during communication in the network environment. It is becoming increasingly essential to identify intrusions into network communications. Researchers use machine learning techniques to design effective intrusion detection systems. In this study, we proposed an intrusion detection system that includes preprocessing procedures and a deep learning model to detect DDoS attacks. For this purpose, various models based on Deep Neural Networks (DNN), Convolutional Neural Networks (CNN), and Long Short Term Memory (LSTM) have been evaluated in terms of detection performance and real-time performance. We tested the suggested model using the CIC-DDoS2019 dataset, which is frequently used in the literature. We applied preprocess techniques such as feature elimination, random subset selection, feature selection, duplication removal, and normalization to the CIC-DDoS2019 dataset. As a result, better recognition performance was obtained for the training and testing evaluations. According to the test results, 99.99% for binary and 99.30% for multiclass accuracy using the CNN-based inception like model gave the best results among the proposed models. Also, the inference time of the proposed model for various sizes of test data looks promising compared to baseline models with a smaller number of trainable parameters. The proposed IDS system, together with the preprocessing methods, provides better results when compared to state-of-the-art studies.</description><identifier>ISSN: 0167-4048</identifier><identifier>EISSN: 1872-6208</identifier><identifier>DOI: 10.1016/j.cose.2022.102748</identifier><language>eng</language><publisher>Amsterdam: Elsevier Ltd</publisher><subject>Artificial neural networks ; Cloud security ; Cybersecurity ; Data preprocessing ; Datasets ; DDoS ; Deep learning ; Denial of service attacks ; Intrusion detection system ; Intrusion detection systems ; Machine learning ; Neural networks ; Preprocessing ; State-of-the-art reviews ; System effectiveness</subject><ispartof>Computers &amp; security, 2022-07, Vol.118, p.102748, Article 102748</ispartof><rights>2022 Elsevier Ltd</rights><rights>Copyright Elsevier Sequoia S.A. Jul 2022</rights><lds50>peer_reviewed</lds50><woscitedreferencessubscribed>false</woscitedreferencessubscribed><citedby>FETCH-LOGICAL-c258t-b8cfdfaf06216cdd061a6e2b360b9de8f5b31ef02060ecfb04e722dfc08401ee3</citedby><cites>FETCH-LOGICAL-c258t-b8cfdfaf06216cdd061a6e2b360b9de8f5b31ef02060ecfb04e722dfc08401ee3</cites><orcidid>0000-0002-0770-599X</orcidid></display><links><openurl>$$Topenurl_article</openurl><openurlfulltext>$$Topenurlfull_article</openurlfulltext><thumbnail>$$Tsyndetics_thumb_exl</thumbnail><linktohtml>$$Uhttps://dx.doi.org/10.1016/j.cose.2022.102748$$EHTML$$P50$$Gelsevier$$H</linktohtml><link.rule.ids>314,780,784,3550,27924,27925,45995</link.rule.ids></links><search><creatorcontrib>Akgun, Devrim</creatorcontrib><creatorcontrib>Hizal, Selman</creatorcontrib><creatorcontrib>Cavusoglu, Unal</creatorcontrib><title>A new DDoS attacks intrusion detection model based on deep learning for cybersecurity</title><title>Computers &amp; security</title><description>The data is exposed to many attacks during communication in the network environment. It is becoming increasingly essential to identify intrusions into network communications. Researchers use machine learning techniques to design effective intrusion detection systems. In this study, we proposed an intrusion detection system that includes preprocessing procedures and a deep learning model to detect DDoS attacks. For this purpose, various models based on Deep Neural Networks (DNN), Convolutional Neural Networks (CNN), and Long Short Term Memory (LSTM) have been evaluated in terms of detection performance and real-time performance. We tested the suggested model using the CIC-DDoS2019 dataset, which is frequently used in the literature. We applied preprocess techniques such as feature elimination, random subset selection, feature selection, duplication removal, and normalization to the CIC-DDoS2019 dataset. As a result, better recognition performance was obtained for the training and testing evaluations. According to the test results, 99.99% for binary and 99.30% for multiclass accuracy using the CNN-based inception like model gave the best results among the proposed models. Also, the inference time of the proposed model for various sizes of test data looks promising compared to baseline models with a smaller number of trainable parameters. The proposed IDS system, together with the preprocessing methods, provides better results when compared to state-of-the-art studies.</description><subject>Artificial neural networks</subject><subject>Cloud security</subject><subject>Cybersecurity</subject><subject>Data preprocessing</subject><subject>Datasets</subject><subject>DDoS</subject><subject>Deep learning</subject><subject>Denial of service attacks</subject><subject>Intrusion detection system</subject><subject>Intrusion detection systems</subject><subject>Machine learning</subject><subject>Neural networks</subject><subject>Preprocessing</subject><subject>State-of-the-art reviews</subject><subject>System effectiveness</subject><issn>0167-4048</issn><issn>1872-6208</issn><fulltext>true</fulltext><rsrctype>article</rsrctype><creationdate>2022</creationdate><recordtype>article</recordtype><recordid>eNp9kMtOwzAQRS0EEqXwA6wssU4Zu4njSmyqlpdUiQV0bSX2GDm0cbEdUP-ehLBmNaOZe-dxCLlmMGPAxG0z0z7ijAPnfYGXuTwhEyZLngkO8pRMelGZ5ZDLc3IRYwPASiHlhGyXtMVvul77V1qlVOmPSF2bQhedb6nBhDoN2d4b3NG6imjobwMPdIdVaF37Tq0PVB9rDBF1F1w6XpIzW-0iXv3FKdk-3L-tnrLNy-PzarnJNC9kymqprbGVBcGZ0MaAYJVAXs8F1AuD0hb1nKEFDgJQ2xpyLDk3VoPMgSHOp-RmnHsI_rPDmFTju9D2KxXv3ysWopCyV_FRpYOPMaBVh-D2VTgqBmrApxo14FMDPjXi6013own7-78cBhW1w1ajcaFnoox3_9l_AAogeaY</recordid><startdate>202207</startdate><enddate>202207</enddate><creator>Akgun, Devrim</creator><creator>Hizal, Selman</creator><creator>Cavusoglu, Unal</creator><general>Elsevier Ltd</general><general>Elsevier Sequoia S.A</general><scope>AAYXX</scope><scope>CITATION</scope><scope>7SC</scope><scope>8FD</scope><scope>JQ2</scope><scope>K7.</scope><scope>L7M</scope><scope>L~C</scope><scope>L~D</scope><orcidid>https://orcid.org/0000-0002-0770-599X</orcidid></search><sort><creationdate>202207</creationdate><title>A new DDoS attacks intrusion detection model based on deep learning for cybersecurity</title><author>Akgun, Devrim ; Hizal, Selman ; Cavusoglu, Unal</author></sort><facets><frbrtype>5</frbrtype><frbrgroupid>cdi_FETCH-LOGICAL-c258t-b8cfdfaf06216cdd061a6e2b360b9de8f5b31ef02060ecfb04e722dfc08401ee3</frbrgroupid><rsrctype>articles</rsrctype><prefilter>articles</prefilter><language>eng</language><creationdate>2022</creationdate><topic>Artificial neural networks</topic><topic>Cloud security</topic><topic>Cybersecurity</topic><topic>Data preprocessing</topic><topic>Datasets</topic><topic>DDoS</topic><topic>Deep learning</topic><topic>Denial of service attacks</topic><topic>Intrusion detection system</topic><topic>Intrusion detection systems</topic><topic>Machine learning</topic><topic>Neural networks</topic><topic>Preprocessing</topic><topic>State-of-the-art reviews</topic><topic>System effectiveness</topic><toplevel>peer_reviewed</toplevel><toplevel>online_resources</toplevel><creatorcontrib>Akgun, Devrim</creatorcontrib><creatorcontrib>Hizal, Selman</creatorcontrib><creatorcontrib>Cavusoglu, Unal</creatorcontrib><collection>CrossRef</collection><collection>Computer and Information Systems Abstracts</collection><collection>Technology Research Database</collection><collection>ProQuest Computer Science Collection</collection><collection>ProQuest Criminal Justice (Alumni)</collection><collection>Advanced Technologies Database with Aerospace</collection><collection>Computer and Information Systems Abstracts – Academic</collection><collection>Computer and Information Systems Abstracts Professional</collection><jtitle>Computers &amp; security</jtitle></facets><delivery><delcategory>Remote Search Resource</delcategory><fulltext>fulltext</fulltext></delivery><addata><au>Akgun, Devrim</au><au>Hizal, Selman</au><au>Cavusoglu, Unal</au><format>journal</format><genre>article</genre><ristype>JOUR</ristype><atitle>A new DDoS attacks intrusion detection model based on deep learning for cybersecurity</atitle><jtitle>Computers &amp; security</jtitle><date>2022-07</date><risdate>2022</risdate><volume>118</volume><spage>102748</spage><pages>102748-</pages><artnum>102748</artnum><issn>0167-4048</issn><eissn>1872-6208</eissn><abstract>The data is exposed to many attacks during communication in the network environment. It is becoming increasingly essential to identify intrusions into network communications. Researchers use machine learning techniques to design effective intrusion detection systems. In this study, we proposed an intrusion detection system that includes preprocessing procedures and a deep learning model to detect DDoS attacks. For this purpose, various models based on Deep Neural Networks (DNN), Convolutional Neural Networks (CNN), and Long Short Term Memory (LSTM) have been evaluated in terms of detection performance and real-time performance. We tested the suggested model using the CIC-DDoS2019 dataset, which is frequently used in the literature. We applied preprocess techniques such as feature elimination, random subset selection, feature selection, duplication removal, and normalization to the CIC-DDoS2019 dataset. As a result, better recognition performance was obtained for the training and testing evaluations. According to the test results, 99.99% for binary and 99.30% for multiclass accuracy using the CNN-based inception like model gave the best results among the proposed models. Also, the inference time of the proposed model for various sizes of test data looks promising compared to baseline models with a smaller number of trainable parameters. The proposed IDS system, together with the preprocessing methods, provides better results when compared to state-of-the-art studies.</abstract><cop>Amsterdam</cop><pub>Elsevier Ltd</pub><doi>10.1016/j.cose.2022.102748</doi><orcidid>https://orcid.org/0000-0002-0770-599X</orcidid></addata></record>
fulltext fulltext
identifier ISSN: 0167-4048
ispartof Computers & security, 2022-07, Vol.118, p.102748, Article 102748
issn 0167-4048
1872-6208
language eng
recordid cdi_proquest_journals_2688596588
source Access via ScienceDirect (Elsevier)
subjects Artificial neural networks
Cloud security
Cybersecurity
Data preprocessing
Datasets
DDoS
Deep learning
Denial of service attacks
Intrusion detection system
Intrusion detection systems
Machine learning
Neural networks
Preprocessing
State-of-the-art reviews
System effectiveness
title A new DDoS attacks intrusion detection model based on deep learning for cybersecurity
url https://sfx.bib-bvb.de/sfx_tum?ctx_ver=Z39.88-2004&ctx_enc=info:ofi/enc:UTF-8&ctx_tim=2024-12-28T19%3A06%3A32IST&url_ver=Z39.88-2004&url_ctx_fmt=infofi/fmt:kev:mtx:ctx&rfr_id=info:sid/primo.exlibrisgroup.com:primo3-Article-proquest_cross&rft_val_fmt=info:ofi/fmt:kev:mtx:journal&rft.genre=article&rft.atitle=A%20new%20DDoS%20attacks%20intrusion%20detection%20model%20based%20on%20deep%20learning%20for%20cybersecurity&rft.jtitle=Computers%20&%20security&rft.au=Akgun,%20Devrim&rft.date=2022-07&rft.volume=118&rft.spage=102748&rft.pages=102748-&rft.artnum=102748&rft.issn=0167-4048&rft.eissn=1872-6208&rft_id=info:doi/10.1016/j.cose.2022.102748&rft_dat=%3Cproquest_cross%3E2688596588%3C/proquest_cross%3E%3Curl%3E%3C/url%3E&disable_directlink=true&sfx.directlink=off&sfx.report_link=0&rft_id=info:oai/&rft_pqid=2688596588&rft_id=info:pmid/&rft_els_id=S0167404822001432&rfr_iscdi=true