A Network-Based Intrusion Detection System Based on Widely Used Cybersecurity Datasets and State of the Art ML Techniques

扫码查看

原文链接

NETL
Springer Nature

外文摘要：Contemporary software systems encompass a multitude of interconnected entities， often accessible via the Web， making them susceptible to potential malicious activities。 Intrusion Detection Systems (IDS) intend to monitor such systems and/or their sub-systems， including the network infrastructure， and identify malicious user behaviour on time， so that the appropriate measures can be taken to protect the relevant entities or mitigate the consequences。 However， user behaviour is often quite complicated and cannot be captured by simple rules。 Machine Learning (ML) techniques provide the means for automatically detecting potential intrusions based on previously collected data。 In this article， a Network-based IDS is presented， which can detect several network attacks through the usage of ML techniques and relevant frameworks。 The publicly available cybersecurity datasets that were used in this work are introduced and their contribution for intrusion detection purposes is evaluated。 Also， the approach followed for dealing with false alarms and new attack types is presented and the relevant findings are discussed。

外文关键词：

Network-based Intrusion DetectionCybersecurity DatasetsMachine LearningNetwork SecurityArtificial Intelligence

作者：

Efthymios Chondrogiannis、Efstathios Karanastasis、Vassiliki Andronikou、Theodora Varvarigou

展开 >

作者单位：

Institute of Communication and Computer Systems, Athens, Greece

会议名称：

IFIP WG 12.5 International Conference on Artificial Intelligence Applications and Innovations

会议地点：

Corfu(GR)

会议母体文献：

Artificial Intelligence Applications and Innovations

页码：

287-300

出版时间：

2024

DOI：

10.1007/978-3-031-63211-2_22