Search

Now, the use of deep learning technology to solve the problems of the low multiclassification task detection accuracy and complex feature engineering existing in traditional intrusion detection technology has become a research hotspot. In all kinds of deep learning, recurrent neural networks (RNN) are very important. The RNN processes 41 feature attributes and maps them to a 122-dimensional high-dimensional feature space. To detect multiclassification tasks, this study proposes an intrusion detection method based on fully connected recurrent neural networks and compares its performance with previous machine learning methods on benchmark datasets. The research results show that the intrusion detection system (IDS) model based on fully connected recurrent neural network is very suitable for classification of intrusion detection. Classification methods, especially in multiclassification tasks, have high detection accuracy, significantly improve the detection performance of detection attacks and DoS attacks, and it provides a new research direction for the future attempts of intrusion detection methods for industrial control systems. [ABSTRACT FROM AUTHOR]

Smart farming aims to ameliorate the quantity and quality of farms products using modern information and communication technologies. Agriculture has always used cutting-edge technology to improve profitability, efficiency, and safety as well as creating the opportunity for more environmentally friendly operations. In smart agriculture network communication between smart devices is necessary to managing the agriculture process. Consequently, the possibility of information being exposed to hacking is very likely, which makes the information security system extremely important and cannot be neglected. Even though many solutions have been developed to overcome cyberattacks in smart networks, some limitations are observed, such as solving multi-class problems, high feature dimensions, and overhead computation. To address the aforementioned issues, an intelligent Intrusion Detection System (IDS) for identifying cyberattacks in the Internet of Agriculture Things (IoAT) is proposed. The developed model uses a proposed reduced kernel method, the Downsized Kernel Partial Least Square (DKPLS) to extract and reduce data feature dimension to improve detection performance. The DRKPLS approach is used to reduce the dimension of a kernel matrix generated using the Kernel Partial Least Square (KPLS) technique by selecting the most important features. In classification phase, the Kernel Extreme Learning Machine (KELM) is used to classify data for binary and multi-class classification. The proposed IDS is evaluated on a new Industrial IoT Dataset, X-IIoTID. The developed approach achieved higher performances for binary classification and for multi–class classification compared to others machine learning and deep learning approaches. The proposed approach achieved an accuracy rate of 99.92% for binary classification and 99.99% for multi–class classification. Furthermore, the higher percentage in multi-class classification is obtained for the two types of attacks Ransom Denial of Service (RDoS) and Command_Control respectively. [ABSTRACT FROM AUTHOR]

In today's digital age, the proliferation of network-connected devices has triggered a surge in cyberattacks. Distributed Denial-of-Service (DDoS) attacks pose a particularly formidable challenge to network security by disrupting access to vital services. While numerous researchers have proposed DDoS detection methods utilizing machine learning and deep learning techniques, developing a robust and reliable DDoS intrusion detection system remains challenging. This challenge is exacerbated by issues such as highly imbalanced data, multi-classification, and computational complexity. This paper proposes an innovative feature selection approach to create a robust intrusion detection system capable of detecting and classifying recent common DDoS attack types. We evaluate the performance of our model on the CICDDoS2019 benchmark dataset. Our experimental results demonstrate that our proposed model outperforms existing methods, achieving a detection accuracy of 96.82%, a recall of 96.82%, a precision of 96.76%, and an F1 score of 96.50%. Additionally, our model exhibits faster prediction times, with the ability to predict an attack in just 0.189 ms. Notably, our approach, combined with preprocessing and feature selection techniques, outperforms previous works and baseline models in DDoS attack classification. [Display omitted] • An innovative hybrid feature extraction method for training of DDoS attack detection model. • We propose a robust CNN model integrated with an Inception mechanism designed to classify various types of DDoS attacks. • Evaluated the network performance of the proposed system in terms of various parameters and compared the results with existing studies and baseline models. • The proposed model outperforms more than 96% in all performance metrics (Precision, Recall, Accuracy, and F1 Score). • The proposed model achieves the fastest prediction time of 0.189 ms among existing models in the literature. [ABSTRACT FROM AUTHOR]

The Internet of Things (IoT) has achieved exponential growth worldwide. Although the IoT is used by millions of users, these networks are handicapped by attacks such as denial of service, man in the middle, and spoofing. These attacks threaten the entire IoT ecosystem and affect the integrity and security of the user. Hence, the prediction and identification of novel network attacks in an IoT network remains a challenge for researchers. Recently, machine learning and deep learning have played a pivotal role in predicting and classifying different attacks in an IoT network. However, these algorithms suffer from computational complexity as the number of attacks increases. Hence, a novel hybrid optimized long short-term memory (LSTM) approach is proposed. Whereas a convolutional neural network is used to extract the temporal and spatial correlated features of the IoT network, the optimized LSTM is used to predict the different attacks in the network. Furthermore, firefly swarm optimization is integrated with LSTM to reduce the computational overhead, which in turn increases the prediction accuracy. Nearly 19,00,503 real-time normal and attack data were collected from the experimental simulation setup based on the OMNET++–Python–IoT framework. Extensive experimentation was carried out to evaluate the proposed algorithm, and various metrics, such as accuracy, sensitivity, specificity, and F1-score, were calculated and compared with state-of-the-art learning-based network intrusion detection systems. Furthermore, other benchmarks, such as the CIDCC-15, UNSW-NB15, and NSL-KDD datasets, were used to evaluate the performance of the different deep-learning-based intrusion detection systems. The results demonstrate that the proposed deep-learning method outperforms other classical learning models with low complexity and high prediction performance. [ABSTRACT FROM AUTHOR]

The Software-Defined Network (SDN) provides a more flexible and effectively managed network design for next-generation networking. Network managers can easily manage and regulate the entire network using its programmable central controller architecture. This central controller serves as the focal point for numerous attack vectors due to its centralized structure. However, Distributed Denial of Service (DDoS) attacks against the SDN is the most prominent. The goal of this project is to use a machine learning method to categorize SDN traffic as either attack or normal traffic. Next, the Feature Selection method, such as the Filter-based Fisher score method, Wrapper-based method, and analysis of variables (ANOVA) f-test, is used for finely-granulated detection. Then, a rule-based detection method using the Renyi joint entropy algorithm is employed to detect DDoS attacks on SDN controllers. We manage a public "DDoS attack SDN Dataset" with 23 attributes overall. The dataset includes normal and attack traffic for the Internet Control Message Protocol (ICMP), User Datagram Protocol (UDP), and Transmission Control Protocol (TCP). Except for attributes that specify the target and source machines, the dataset, which contains more than 100,000 recordings, has statistical features such as byte count, duration sec, packet rate, and packet per flow. In the classification process, many classifiers such as Artificial Neural Network (ANN), XGBoost (XGB), Support Vector Machine (SVM), and k-Nearest Neighbor (k-NN) were used. The test results demonstrated the efficacy and efficiency of the suggested strategy using the analysis of variables (ANOVA), which performed better than competing methods across a range of evaluation parameters. [ABSTRACT FROM AUTHOR]