Center for Ubiquitous Computing, University of Oulu, 90570 Oulu, Finland.
Sensors (Basel). 2022 Nov 30;22(23):9318. doi: 10.3390/s22239318.
Intrusion detection systems (IDS) are crucial for network security because they enable detection of and response to malicious traffic. However, as next-generation communications networks become increasingly diversified and interconnected, intrusion detection systems are confronted with dimensionality difficulties. Prior works have shown that high-dimensional datasets that simulate real-world network data increase the complexity and processing time of IDS system training and testing, while irrelevant features waste resources and reduce the detection rate. In this paper, a new intrusion detection model is presented which uses a genetic algorithm (GA) for feature selection and optimization algorithms for gradient descent. First, the GA-based method is used to select a set of highly correlated features from the NSL-KDD dataset that can significantly improve the detection ability of the proposed model. A Back-Propagation Neural Network (BPNN) is then trained using the HPSOGWO method, a hybrid combination of the Particle Swarm Optimization (PSO) and Grey Wolf Optimization (GWO) algorithms. Finally, the hybrid HPSOGWO-BPNN algorithm is used to solve binary and multi-class classification problems on the NSL-KDD dataset. The experimental outcomes demonstrate that the proposed model achieves better performance than other techniques in terms of accuracy, with a lower error rate and better ability to detect different types of attacks.
入侵检测系统(IDS)对于网络安全至关重要,因为它们能够检测和响应恶意流量。然而,随着下一代通信网络变得越来越多样化和互联,入侵检测系统面临着维度难题。先前的工作表明,模拟真实网络数据的高维数据集增加了 IDS 系统训练和测试的复杂性和处理时间,而不相关的特征则浪费资源并降低了检测率。在本文中,提出了一种新的入侵检测模型,该模型使用遗传算法(GA)进行特征选择和优化算法进行梯度下降。首先,基于 GA 的方法用于从 NSL-KDD 数据集选择一组高度相关的特征,这些特征可以显著提高所提出模型的检测能力。然后,使用 HPSOGWO 方法(PSO 和 GWO 算法的混合)训练反向传播神经网络(BPNN)。最后,使用混合 HPSOGWO-BPNN 算法解决 NSL-KDD 数据集上的二进制和多类分类问题。实验结果表明,与其他技术相比,该模型在准确性方面表现更好,错误率更低,检测不同类型攻击的能力更强。