Lightweight Hybrid CAE-ELM and Enhanced Smote Based Intrusion Detection for Networks

Abstract

The intrusion detection system (IDS) plays an imperative role in defending the network from attacks. But, the IDS data is imbalanced, making the process complex for detecting the attacks accurately. According to these problems, this study proposes a network intrusion detection system based on an enhanced synthetic minority oversampling technique (SMOTE) and lightweight hybrid CAE (convolutional auto encoder)-ELM (extreme learning machine) model. Initially, the normalization of the original data is performed to avoid the influence of the maximum and minimum values. Secondly, an enhanced SMOTE is employed for solving the issues of the less detection rate of minority-attacks because of less training data. Here, the war strategy optimization (WSO) is incorporated with the SMOTE to design a novel WSO-based SMOTE technique for balancing the dataset. The three major steps utilized in WSO-based SMOTE are WSO based clustering, filtering and over-sampling. Then, the Information gain and fisher score based features extraction is employed for the reduction of computational complexity prior to the intrusion detection. Finally, the lightweight hybrid CAE-ELM model is executed for attack detection. CAEs are one of the most commonly used learning models because of their ability to construct a higher-level feature representation from the input data. Another model used in intrusion detection is the ELM, which provides an acceptable discrimination performance as well as a fast speed of learning. The performance of the proposed NIDS model is tested on the two benchmark datasets and achieved better accuracies of 99.21% and 99.15% on the UNSW-NB15 and CSE-CIC-IDS2018 datasets.