Ensemble and Deep-Learning Methods for Two-Class and Multi-Attack Anomaly Intrusion Detection: An Empirical Study

Abstract

Cyber-security, as an emerging field of research, involves the development and management of techniques and technologies for protection of data, information and devices. Protection of network devices from attacks, threats and vulnerabilities both internally and externally had led to the development of ceaseless research into Network Intrusion Detection System (NIDS). Therefore, an empirical study was conducted on the effectiveness of deep learning and ensemble methods in NIDS, thereby contributing to knowledge by developing a NIDS through the implementation of machine and deep-learning algorithms in various forms on recent network datasets that contains more recent attacks types and attackers’ behaviours (UNSW-NB15 dataset). This research involves the implementation of a deep-learning algorithm–Long Short-Term Memory (LSTM)–and two ensemble methods (a homogeneous method–using optimised bagged Random-Forest algorithm, and a heterogeneous method–an Averaged Probability method of Voting ensemble). The heterogeneous ensemble was based on four (4) standard classifiers with different computational characteristics (Naïve Bayes, kNN, RIPPER and Decision Tree). The respective model implementations were applied on the UNSW_NB15 datasets in two forms: as a two-classed attack dataset and as a multi-attack dataset. LSTM achieved a detection accuracy rate of 80% on the two-classed attack dataset and 72% detection accuracy rate on the multi-attack dataset. The homogeneous method had an accuracy rate of 98% and 87.4% on the two-class attack dataset and the multi-attack dataset, respectively. Moreover, the heterogeneous model had 97% and 85.23% detection accuracy rate on the two-class attack dataset and the multi-attack dataset, respectively.

Authors and Affiliations

Adeyemo Victor Elijah, Azween Abdullah, NZ Jhanjhi, Mahadevan Supramaniam, Balogun Abdullateef O

Keywords

Related Articles

Image Compression using Approximate Matching and Run Length

Image compression is currently a prominent topic for both military and commercial researchers. Due to rapid growth of digital media and the subsequent need for reduced storage and to transmit the image in an effective m...

EDAC: A Novel Energy-Aware Clustering Algorithm for Wireless Sensor Networks

Clustering is a useful technique for reducing energy consumption in wireless sensor networks (WSN). To achieve a better network lifetime performance, different clustering algorithms use various parameters for cluster hea...

A Survey on Attacks and Defense Metrics of Routing Mechanism in Mobile Ad hoc Networks

A Mobile Ad hoc Network (MANET) is a dynamic wireless network that can be formed infrastructure less connections in which each node can act as a router. The nodes in MANET themselves are responsible for dynamically disco...

A GRASP-based Solution Construction Approach for the Multi-Vehicle Profitable Pickup and Delivery Problem

With the advancement of e-commerce and Internet shopping, the high competition between carriers has made many companies rethink their service mechanisms to customers, in order to ensure that they stay competitive in the...

Intelligent Transportation System (ITS) for Smart-Cities using Mamdani Fuzzy Inference System

It is estimated that more than half of the world population lives in cities according to (UN forecasts, 2014), so cities are vital. Cities, as we all know facing with complex challenges – for smart cities the outdated tr...

Download PDF file
  • EP ID EP646212
  • DOI 10.14569/IJACSA.2019.0100969
  • Views 77
  • Downloads 0

How To Cite

Adeyemo Victor Elijah, Azween Abdullah, NZ Jhanjhi, Mahadevan Supramaniam, Balogun Abdullateef O (2019). Ensemble and Deep-Learning Methods for Two-Class and Multi-Attack Anomaly Intrusion Detection: An Empirical Study. International Journal of Advanced Computer Science & Applications, 10(9), 520-528. https://europub.co.uk./articles/-A-646212