RESNETCNN:an Abnormal Network Traffic Flows Detection Model
- College of Information Engineering,
Shanghai Maritime University, Shanghai201306, China
{ 202130310117, mmcui } @stu.shmtu.edu.cn, dzhan@shmtu.edu.cn - Hangzhou Anheng Information Technology Co.,
LTD, Hangzhou310051, China
{frank.fan, anna.zhou}@dbappsecurity.com.cn
Abstract
Intrusion detection is an important means to protect system security by detecting intrusions or intrusion attempts on the system through operational behaviors, security logs, and data audit. However, existing intrusion detection systems suffer from incomplete data feature extraction and low classification accuracy, which affects the intrusion detection effect. To this end, this paper proposes an intrusion detection model that fuses residual network(RESNET) and parallel crossconvolutional neural network, called RESNETCCN.RESNETCNN can efficiently learn various data stream features through the fusion of deep learning and convolutional neural network (CNN), which improves the detection accuracy of abnormal data streams in unbalanced data streams, moreover, the oversampling method into the data preprocessing, to extract multiple types of unbalanced data stream features at the same time, effectively solving the problems of incomplete data feature extraction and low classification accuracy of unbalanced data streams. Finally, three improved versions of RESNETCNN networks are designed to meet the requirements of different traffic data processing, and the highest detection accuracy reaches 99.98% on the CICIDS 2017 dataset and 99.90% on the ISCXIDS 2012 dataset.
Key words
Intrusion detection,RESNETCNN,Deep learning.
Digital Object Identifier (DOI)
https://doi.org/10.2298/CSIS221124004L
Publication information
Volume 20, Issue 3 (June 2023)
Year of Publication: 2023
ISSN: 2406-1018 (Online)
Publisher: ComSIS Consortium
Full text
Available in PDF
Portable Document Format
How to cite
Li, Y., Han, D., Cui, M., Yuan, F., Zhou, Y.: RESNETCNN:an Abnormal Network Traffic Flows Detection Model. Computer Science and Information Systems, Vol. 20, No. 3, 997–1014. (2023), https://doi.org/10.2298/CSIS221124004L