Aljumah Abdullah
College of Computer Engineering and Sciences, Prince Sattam Bin Abdulaziz University, Alkharj, Saudi Arabia.
PeerJ Comput Sci. 2021 Sep 29;7:e721. doi: 10.7717/peerj-cs.721. eCollection 2021.
In the Information and Communication Technology age, connected objects generate massive amounts of data traffic, which enables data analysis to uncover previously hidden trends and detect unusual network-load. We identify five core design principles to consider when designing a deep learning-empowered intrusion detection system (IDS). We proposed the Temporal Convolution Neural Network (TCNN), an intelligent model for IoT-IDS that aggregates convolution neural network (CNN) and generic convolution, based on these concepts. To handle unbalanced datasets, TCNN is accumulated with synthetic minority oversampling technique with nominal continuity. It is also used in conjunction with effective feature engineering techniques like attribute transformation and reduction. The presented model is compared to two traditional machine learning algorithms, random forest (RF) and logistic regression (LR), as well as LSTM and CNN deep learning techniques, using the Bot-IoT data repository. The outcomes of the experiments depicts that TCNN maintains a strong balance of efficacy and performance. It is better as compared to other deep learning IDSs, with a multi-class traffic detection accuracy of 99.9986 percent and a training period that is very close to CNN.
在信息通信技术时代,联网设备会产生大量数据流量,这使得数据分析能够揭示先前隐藏的趋势并检测异常网络负载。我们确定了在设计深度学习赋能的入侵检测系统(IDS)时需要考虑的五个核心设计原则。基于这些概念,我们提出了时间卷积神经网络(TCNN),这是一种用于物联网IDS的智能模型,它聚合了卷积神经网络(CNN)和通用卷积。为了处理不平衡数据集,TCNN采用了具有名义连续性的合成少数过采样技术。它还与属性变换和约简等有效的特征工程技术结合使用。使用Bot-IoT数据存储库,将所提出的模型与两种传统机器学习算法(随机森林(RF)和逻辑回归(LR))以及LSTM和CNN深度学习技术进行比较。实验结果表明,TCNN在有效性和性能方面保持了很强的平衡。与其他深度学习IDS相比,它表现更优,多类流量检测准确率达到99.9986%,训练周期与CNN非常接近。