A Deep Q-Learning Approach to Intrusion Detection and Prevention Systems: Enhancing Cybersecurity through Intelligent Adaptation
Pankaj Ramchandra Chandre, Manoj Bapurao Shinde, Shruti Vilas Tilwant, Arun Bhau Ghandat, Bhagyashree D. Shendkar, Prashant Shantaram Dhotre · 2024
A Deep Q-Learning approach to Intrusion Detection and Prevention Systems (IDPS) offers a cutting-edge solution for enhancing cybersecurity by leveraging intelligent machine learning models. This method dynamically adapts to evolving threats, learning optimal defense strategies through a reward-punishment system. The presented architecture integrates sensor-based traffic monitoring, feature extraction, and real-time decision-making to strengthen network resilience. The system leverages sensor nodes to monitor traffic and uses traffic analyzers to extract critical features from network data. A Deep Q-Learning model is employed to analyze these features, dynamically adjusting security policies by learning through reward and punishment mechanisms. The system interacts with network infrastructure, such as firewalls, routers, and switches, to mitigate threats in real time. Threat intelligence is continuously updated in a dedicated database, while an action executor enforces security measures and policies. This intelligent adaptation ensures proactive threat prevention and network resilience.