Deep Learning Applications for Intrusion Detection in Network Traffic
This paper discusses the problems of applying deep learning methods for intrusion detection in network traffic. The results of analyzing the relevant studies and reviews of deep learning applications for intrusion detection are presented. The most popular deep learning methods are discussed and compared. A classification system of deep learning methods for intrusion detection is proposed. The current trends and challenges of applying deep learning methods for intrusion detection in network traffic are identified. To assess the applicability of deep learning methods for intrusion detection, the CNN-BiLSTM neural network is synthesized. The synthesized network is compared with the previously developed model based on the random forest classifier. The deep learning method makes it possible to simplify the feature engineering stage, with the values of quality metrics for the random forest and CNN-BiLSTM models being close. This confirms the high prospects for application of deep learning methods to intrusion detection.
Authors
- Dmitry Aleksandrovich Rybolovlev (ORCID: https://orcid.org/0000-0003-4524-655X)
- Aleksandr Igorevich Getman (ORCID: https://orcid.org/0000-0002-6562-9008)
- Anastasiya Grigorevna Nikolskaya (ORCID: https://orcid.org/0000-0001-5965-4664)
Institutions
- National Research University Higher School of Economics (RU)
- Moscow Institute of Physics and Technology (RU)
- Moscow Power Engineering Institute (RU)
- Lomonosov Moscow State University (RU)
- Institute for System Programming (RU)
- Moscow Aviation Institute (RU)
- Orel State University named after I.S. Turgenev (RU)
Publication Details
- Journal
- Programming and Computer Software
- Published
- 2024-12-01
- DOI
- https://doi.org/10.1134/s0361768824700221
- Citations
- 7
- Primary Topic
- Network Security and Intrusion Detection
- Type
- article
- Field-Weighted Citation Impact
- 2.44