A Review Paper on Designing Intelligent Intrusion Detection System Using Deep Learning
Priyanka S. Wasnik, Nekita A. Chavhan · 2023
Machine learning techniques have been have proven to be more effective than conventional extensively used in the creation of intrusion detection systems (IDS) that can swiftly and automatically identify and classify cyber attacks at the host-and network-levels. A scalable solution is needed since destructive attacks are happening so quickly and are changing all the time. For more investigation, the malware community has access to a number of malware databases. The performance of several machine learning algorithms on a range of datasets that were made available to the general public, however, has not yet been thoroughly evaluated by any study. The publicly available malware datasets should be regularly updated and benchmarked due to the dynamic nature of malware and the continuously evolving attacking techniques. In this study, a deep neural network (DNN), a type of deep learning model, is examined in order to create a flexible and efficient IDS to identify and categorise unexpected and unanticipated cyber threats. In order to analyse a variety of datasets that have been produced throughout time using both static and dynamic methodologies, it is vital to take into account the rapid increase in attacks and the constant evolution of network behaviour. It is simpler to select the most effective algorithm for accurately predicting forthcoming cyber attacks with the help of this type of research. Many publicly available benchmark malware datasets are used to offer a thorough review of DNN and other conventional machine learning classifier studies. The KDDCup 99 dataset and the accompanying hyper parameter selection techniques are used to choose the ideal network parameters and topologies for DNNs. A learning rate of [0.01-0.5] is applied to every 1,000-epoch DNN experiment. A variety of datasets, including NSL-KDD, UNSW-NB15, Kyoto, WSN-DS, and CICIDS 2017, as well as the DNN model that performed well on KDDCup 99 are used to conduct the benchmark. Our DNN model trains a high-dimensional, abstract feature representation by combining the IDS data into several hidden layers. DNNs machine learning classifiers through extensive experimental testing. In order to properly monitor host-level events and network traffic and proactively identify potential attackers, we provide a real-time scale-hybrid-IDS-Alert Net system.