A Lightweight Intelligent Network Intrusion Detection System Using One-Class Autoencoder and Ensemble Learning for IoT

Abstract

Network intrusion detection technology is key to cybersecurity regarding the Internet of Things (IoT). The traditional intrusion detection system targeting Binary or Multi-Classification can detect known attacks, but it is difficult to resist unknown attacks (such as zero-day attacks). Unknown attacks require security experts to confirm and retrain the model, but new models do not keep up to date. This paper proposes a Lightweight Intelligent NIDS using a One-Class Bidirectional GRU Autoencoder and Ensemble Learning. It can not only accurately identify normal and abnormal data, but also identify unknown attacks as the type most similar to known attacks. First, a One-Class Classification model based on a Bidirectional GRU Autoencoder is introduced. This model is trained with normal data, and has high prediction accuracy in the case of abnormal data and unknown attack data. Second, a multi-classification recognition method based on ensemble learning is proposed. It uses Soft Voting to evaluate the results of various base classifiers, and identify unknown attacks (novelty data) as the type most similar to known attacks, so that exception classification becomes more accurate. Experiments are conducted on WSN-DS, UNSW-NB15, and KDD CUP99 datasets, and the recognition rates of the proposed models in the three datasets are raised to 97.91%, 98.92%, and 98.23% respectively. The results verify the feasibility, efficiency, and portability of the algorithm proposed in the paper.

A Network Intrusion Detection Method for Information Systems Using Federated Learning and Improved Transformer

“…BiGRU -SL (Yao, et al, 2023) Implement lightweight detection using BiGRU autoencoder and integrated learning.…”

“…The detection takes a long time. Yao, et al, (2023), propose a lightweight intelligent intrusion detection method using single class bidirectional GRU (BiGRU) autoencoder and ensemble learning (EL), in which soft voting is used to evaluate the results of various base classifiers, making anomaly classification more accurate. Priya, & Ponmagal, (2023) use genetic algorithms to optimize automatic encoders for classification and recognition of service based attacks in cloud systems.…”

Improving the IoT Attack Classification Mechanism with Data Augmentation for Generative Adversarial Networks

“…When DDoS attacks were identified using the proposed method, the highest accuracy reached 99.91%, and the accuracy of other categories was about 99.7%. In [17], based on the bidirectional gate recurrent unit (GRU) concept, the network architecture utilizes an autoencoder to analyze zero-day attacks. It performs binary classification to determine whether the data source is normal or an attack.…”