Enhancing intrusion detection through anomaly detection and integrated deep learning with TabTransformer

Intrusion detection systems (IDSs) are crucial for safeguarding network infrastructures as cybersecurity threats rapidly evolve, necessitating effective detection and response mechanisms. This paper introduces an intrusion detection model that combines anomaly detection with deep learning techniques and the TabTransformer architecture. Anomaly detection performs binary classification, identifying deviations from normal behaviour and enriching the feature set with binary predictions. For multiclass classification, the TabTransformer processes categorical data efficiently, while the convolutional neural network (CNN) and long short-term memory (LSTM) extract patterns from continuous data. Evaluations on benchmark datasets demonstrate that the proposed method surpasses baseline models, achieving superior accuracy, recall rate, and false positive rate.