Deep Learning for Intrusion Detection Systems (IDSs) in Time Series Data

Konstantinos Psychogyios, Andreas Papadakis, Stavroula Bourou, Nikolaos Nikolaou, Apostolos Maniatis and Theodore Zahariadis ()
Additional contact information
Konstantinos Psychogyios: Synelixis Solutions S.A., 10 Farmakidou Av., 34100 Chalkida, Greece
Andreas Papadakis: Synelixis Solutions S.A., 10 Farmakidou Av., 34100 Chalkida, Greece
Stavroula Bourou: Synelixis Solutions S.A., 10 Farmakidou Av., 34100 Chalkida, Greece
Nikolaos Nikolaou: Synelixis Solutions S.A., 10 Farmakidou Av., 34100 Chalkida, Greece
Apostolos Maniatis: Synelixis Solutions S.A., 10 Farmakidou Av., 34100 Chalkida, Greece
Theodore Zahariadis: Synelixis Solutions S.A., 10 Farmakidou Av., 34100 Chalkida, Greece

Future Internet, 2024, vol. 16, issue 3, 1-16

Abstract: The advent of computer networks and the internet has drastically altered the means by which we share information and interact with each other. However, this technological advancement has also created opportunities for malevolent behavior, with individuals exploiting vulnerabilities to gain access to confidential data, obstruct activity, etc. To this end, intrusion detection systems (IDSs) are needed to filter malicious traffic and prevent common attacks. In the past, these systems relied on a fixed set of rules or comparisons with previous attacks. However, with the increased availability of computational power and data, machine learning has emerged as a promising solution for this task. While many systems now use this methodology in real-time for a reactive approach to mitigation, we explore the potential of configuring it as a proactive time series prediction. In this work, we delve into this possibility further. More specifically, we convert a classic IDS dataset to a time series format and use predictive models to forecast forthcoming malign packets. We propose a new architecture combining convolutional neural networks, long short-term memory networks, and attention. The findings indicate that our model performs strongly, exhibiting an F1 score and AUC that are within margins of 1% and 3%, respectively, when compared to conventional real-time detection. Also, our architecture achieves an ∼8% F1 score improvement compared to an LSTM (long short-term memory) model.

Keywords: intrusion detection system; deep learning; time series forecasting; cybersecurity; machine learning (search for similar items in EconPapers)
JEL-codes: O3 (search for similar items in EconPapers)
Date: 2024
References: View references in EconPapers View complete reference list from CitEc
Citations: View citations in EconPapers (1)

Downloads: (external link)
https://www.mdpi.com/1999-5903/16/3/73/pdf (application/pdf)
https://www.mdpi.com/1999-5903/16/3/73/ (text/html)

Related works:
This item may be available elsewhere in EconPapers: Search for items with the same title.

Export reference: BibTeX RIS (EndNote, ProCite, RefMan) HTML/Text

Persistent link: https://EconPapers.repec.org/RePEc:gam:jftint:v:16:y:2024:i:3:p:73-:d:1344394

Access Statistics for this article

Future Internet is currently edited by Ms. Grace You

More articles in Future Internet from MDPI
Bibliographic data for series maintained by MDPI Indexing Manager ().