An effective intrusion detection system based on feature selection and regularized long short-term memory classifier
摘要
In recent days, the expansion of Internet of Things (IoT) and the quick advancement of computer system applications contribute to the current phenomenon of data growth. The field of intrusion detection has expanded considerably as a result of the need to protect networks from various attacks. Previously, security has been provided by combining conventional intrusion monitoring systems with a high number of security measures. However, the ability of combined systems to analyze enormous amounts of data has been restricted. Therefore, in this research, open-source and freely available datasets known as NSL-KDD and CSE-CIC-IDS2018 datasets are analyzed. Those datasets contain a class column that splits the attack detection into two classes (normal and anomalous) and four categories (DoS, probe, R2L, and U2R). Then, feature encoding and scaling are used for pre-processing. After that, a SelectPercentile-based feature selection algorithm is suggested to identify the numerous various intrusion attacks and choose the best features. Later, the Regularized Long Short-Term Memory (LSTM) is employed to classify the data. The result analysis verified that Regularized LSTM surpasses the existing models in the NSL-KDD based on accuracy (99.95%), false alarm rate (0.05%), attack detection rate (99.82%), and f1-measure (99.94%). While in the CSE-CIC-IDS2018 dataset, the Regularized LSTM method achieves better accuracy (99.33%), false alarm rate (0.07%), attack detection rate (99.96), and f1-measure (99.95%).