Abstract To tackle new and complex attacks, modern Intrusion Detection Systems (IDSs) are developed using Deep Learning (DL) techniques and are trained on intrusion detection datasets such as KDD and NSL-KDD. These two datasets have a large number of samples in Denial of Service and Probe attack classes besides the Normal class, but the number of samples in Remote to Local (R2L) and User to Root (U2R) attack classes is very less. R2L and U2R attacks represent the minority classes of these two datasets and due to lack of training samples in these minority classes, DL based IDSs are unable to detect them accurately. This leads to class imbalance problem and increases the chances of the network being compromised due to undetected intrusions. To handle this class imbalance problem in IDSs, this paper proposes Siam-IDS which is a novel IDS based on Siamese Neural Network (Siamese-NN). The proposed Siam-IDS is able to detect R2L and U2R attacks without using traditional class balancing techniques such as oversampling and random undersampling. The performance of Siam-IDS was compared with existing IDSs developed using DL techniques namely Deep Neural Network (DNN) and Convolutional Neural Network (CNN). Siam-IDS was able to achieve higher recall values for both R2L and U2R attack classes when compared to its counterparts.
[1]
Mohammad Reza Parsaei,et al.
A Hybrid Data Mining Approach for Intrusion Detection on Imbalanced NSL-KDD Dataset
,
2016
.
[2]
Nitesh V. Chawla,et al.
SMOTE: Synthetic Minority Over-sampling Technique
,
2002,
J. Artif. Intell. Res..
[3]
Daejin Park,et al.
Accurate Age Estimation Using Multi-Task Siamese Network-Based Deep Metric Learning for Frontal Face Images
,
2018,
Symmetry.
[4]
Miad Faezipour,et al.
Deep and Machine Learning Approaches for Anomaly-Based Intrusion Detection of Imbalanced Network Traffic
,
2019,
IEEE Sensors Letters.
[5]
Dieter Hogrefe,et al.
Two Layers Multi-class Detection method for network Intrusion Detection System
,
2017,
2017 IEEE Symposium on Computers and Communications (ISCC).