Data generative model to detect the anomalies for IDS imbalance CICIDS2017 dataset

Barkah, Azhari Shouni and Selamat, Siti Rahayu and Zainal Abidin, Zaheera and Wahyudi, Rizki (2023) Data generative model to detect the anomalies for IDS imbalance CICIDS2017 dataset. TEM Journal, 12 (1). pp. 80-89. ISSN 2217-8309

Text 0101704092023.pdf Available under License Creative Commons Attribution Non-commercial No Derivatives. Download (536kB)

Abstract

The system of intrusion detection dataset enables machine learning to recognize attack activity in the network. The intrusion, however, is naturally imbalanced, most of the traffic is normal traffic. Moreover, a certain attack is more popular than others. Therefore, the number of cases is highly imbalanced with the majority of attacks dominated by Distributed Denial of Services (DDoS), Denial of Service Hulk (DoS_Hulk), and PortScan more than 4.5% of attacks data. While the minority attack such as DoS_goldeneye, DoS_slowloris, DoS_slowhttptest, Web Attacks, Infiltration, Bot, and Heartbleed was only recorded in less than 1% of attack data. We propose data generative model (DGM) using the Conditional Generative Adversarial Network (CGAN) to improve the class of minorities of the IDS dataset. In this study, we tested the performance of the Data Generative Model based on CGAN in the CICIDS2017 dataset. There are new attacks in this dataset, including Bot, Web_attacks, Infiltration and Heartbleed. According to our experiments, the model successfully detect new attacks and improves the weighted f1-score by 99,92% compared to that of achievers by existing methods using the CICIDS2017 dataset.

Item Type:	Article
Uncontrolled Keywords:	DGM, CGAN, Imbalance data, IDS dataset.
Divisions:	Faculty of Information and Communication Technology
Depositing User:	Norfaradilla Idayu Ab. Ghafar
Date Deposited:	06 Jan 2025 10:59
Last Modified:	06 Jan 2025 10:59
URI:	http://eprints.utem.edu.my/id/eprint/28142
Statistic Details:	View Download Statistic

Actions (login required)

View Item