A Network Intrusion Detection Method Incorporating Bayesian Attack Graph and Incremental Learning Part

Kongpei Wu (), Huiqin Qu and Conggui Huang
Additional contact information
Kongpei Wu: School of Control Technology, Wuxi Institute of Technology, Wuxi 214121, China
Huiqin Qu: School of Control Technology, Wuxi Institute of Technology, Wuxi 214121, China
Conggui Huang: School of Control Technology, Wuxi Institute of Technology, Wuxi 214121, China

Future Internet, 2023, vol. 15, issue 4, 1-14

Abstract: For the current stage of complex and changing network environments and correlated and synchronized vulnerability attacks, this study first fuses attack graph technology and Bayesian networks and constructs Bayesian attack graphs toportray the correlation relationships between vulnerabilities and discovering attackers’ intentions. Meanwhile, improving the Bayesian attack graph is difficult because it is difficult to achieve active updates and adapt to the changing network environment and other problems. The study proposed a detection method that integrated the Bayesian attack graph and the XGBoost incremental learning (IL) approach. Experiments showed that the IL model had an accuracy of 0.951, an accuracy of 0.999, a recall of 0.815, an F1 value of 0.898, and an Area Under Curve (AUC) value of 0.907. The prediction ability of this method was better than that of the base model. Bayesian attack graphs fused with IL can detect attacks in the network more efficiently and accurately, so the probability of each node in the network system being attacked can be updated in real time.

Keywords: Bayesian attack graph; cyber attack; XGBoost; intrusion detection; IL (search for similar items in EconPapers)
JEL-codes: O3 (search for similar items in EconPapers)
Date: 2023
References: View complete reference list from CitEc
Citations:

Downloads: (external link)
https://www.mdpi.com/1999-5903/15/4/128/pdf (application/pdf)
https://www.mdpi.com/1999-5903/15/4/128/ (text/html)

Related works:
This item may be available elsewhere in EconPapers: Search for items with the same title.

Export reference: BibTeX RIS (EndNote, ProCite, RefMan) HTML/Text

Persistent link: https://EconPapers.repec.org/RePEc:gam:jftint:v:15:y:2023:i:4:p:128-:d:1109595

Access Statistics for this article

Future Internet is currently edited by Ms. Grace You

More articles in Future Internet from MDPI
Bibliographic data for series maintained by MDPI Indexing Manager ().