A tree-based IDS detects cyber-attacks in AV networks.
problem Cyber-attacks in AV and IoV networks.
method Tree-structure machine learning models, ensemble learning, feature selection.
result High detection rate and low computational cost achieved.
On-device research index
arXiv research
A locally-built, LLM-digested index of recent arXiv papers in quant finance, geometry/topology, and statistical ML — keyword search served straight from SQLite on this machine.
169,051 papers · 148 categories
Trend · papers per month
48 results for “intrusion detection systems”
This paper explores deep learning for improved intrusion detection.
problem Improving intrusion detection systems using deep learning.
method Discusses deep learning models and neural networks for intrusion detection.
result Promises enhanced performance in intrusion detection.
Deep learning detects cyber-attacks in smart grid systems.
problem Cyber-attacks on smart grid systems.
method Deep learning-based intrusion detection system trained on industrial dataset.
result Proposed system outperforms Naive Bayes, SVM, and Random Forest.
Paper proposes mimic learning to share intrusion detection models without private data.
problem Difficulty in obtaining labelled training data for intrusion detection models due to privacy concerns.
method Use of mimic learning to transfer knowledge from a teacher model trained on private data to a student model.
result Student model mimics teacher model without access to private data.
Investigating Resistance of Deep Learning-based IDS against Adversaries using min-max Optimizationcs.LG
Study on deep learning IDS resistance against adversarial attacks.
problem Vulnerabilities in deep learning-based IDS against adversarial attacks.
method Apply min-max optimization to train IDS against adversarial samples.
result Adversarial attack methods can be used in continuous domains and boost IDS robustness.
This paper shows diffusion models improve intrusion detection by purifying adversarial examples.
problem Adversarial examples mislead ML intrusion detection systems, leading to false alerts or evasion.
method Used diffusion models to purify adversarial examples in intrusion detection.
result Diffusion models enhance adversarial robustness in intrusion detection without significantly impacting normal performance.
New online learning algorithms improve cyberattack detection in industrial control systems.
problem Detecting cyberattacks in industrial control systems with limited resources.
method Online learning algorithms to process continuous data streams and address class imbalance.
result Improved detection rate of cyberattacks in industrial control systems.
Adversarial attacks hide cyber-physical attacks in ICS.
problem Hiding cyber-physical attacks in industrial control systems.
method Modeling an attacker compromising sensors, manipulating data, and evaluating attacks on both continuous and mixed data.
result Successfully hides cyber-physical attacks with 2.87 out of 12 sensors compromised on average.
AutoIDS uses auto-encoders to detect network intrusions efficiently.
problem Detecting network intrusions with high accuracy and efficiency.
method Semi-supervised machine learning with cascading encoder-decoder neural networks.
result AutoIDS achieves 90.17% accuracy on NSL-KDD dataset, superior to other methods.
Improved IDS using LSTM and embedding for network traffic data.
problem Network security threats and need for IDS to detect attacks.
method Proposes IDS models using LSTM for time-series and embedding for categorical network traffic data.
result Improves binary classification accuracy to 99.72%.
EagerNet: Early Predictions of Neural Networks for Computationally Efficient Intrusion Detectioncs.LG
EagerNet detects network attacks quickly with less resources.
problem Efficiently detecting network attacks with minimal resources.
method Proposes a new architecture that trades prediction speed for accuracy, evaluating only a subset of layers.
result Comparable accuracies to simple FCNNs achieved with early predictions, saving energy and computational efforts.
Heterogeneous Domain Adaptation for IoT Intrusion Detection: A Geometric Graph Alignment Approachcs.CR
Geometric Graph Alignment enhances IoT intrusion detection using NID data.
problem Data scarcity hinders IoT intrusion detection accuracy.
method Geometric Graph Alignment (GGA) approach to transfer knowledge between network intrusion detection and IoT intrusion detection domains.
result GGA approach boosts IoT intrusion detection performance on multiple datasets.
Project compares KDDCup99 and NSL-KDD datasets using ML classifiers.
problem Quality and bias in IoT network intrusion detection datasets.
method Evaluation of various ML classifiers on both datasets.
result NSL-KDD dataset is of higher quality with lower bias.
Use Dimensionality Reduction and SVM Methods to Increase the Penetration Rate of Computer Networkscs.CR
In the world today computer networks have a very important position and most of the urban and national infrastructure as well as organizations are managed by computer networks, therefore, the security of these systems against the planned attacks is of great importance. Therefore, researchers have been trying to find th…
A Performance Comparison of Data Mining Algorithms Based Intrusion Detection System for Smart Gridcs.CR
Random Forest outperforms other IDS algorithms in smart grids.
problem Security vulnerabilities in smart grids.
method Comparison of four data mining algorithms (Random Forest, SVM, Neural Network, and KNN) in detecting attacks.
result Random Forest outperforms other algorithms in terms of detection accuracy and efficiency.
User authentication and intrusion detection differ from standard classification problems in that while we have data generated from legitimate users, impostor or intrusion data is scarce or non-existent. We review existing techniques for dealing with this problem and propose a novel alternative based on a principled sta…
Proposes an autonomous IDS using multiple learning techniques.
problem Autonomous and zero-day attack detection in IDS.
method Parallel use of GRU, CNN, and random forest; majority vote and OR logic combination.
result Achieved high accuracy (87.28%) on NSL-KDD's 'KDDTest+' dataset.
New NIDS uses hypergraphs for real-time detection of evolving port scans.
problem Challenges in offline NIDS for auto-generated port scans.
method Hypergraph-based metrics for real-time ML ensemble NIDS.
result High accuracy, precision, and recall in detecting port scans and attacks.
Many current approaches to the design of intrusion detection systems apply feature selection in a static, non-adaptive fashion. These methods often neglect the dynamic nature of network data which requires to use adaptive feature selection techniques. In this paper, we present a simple technique based on incremental le…
Paper proposes an efficient GAN model for discrete cyber-intrusion detection.
problem Cyber-intrusion detection in systems with rare abnormal data.
method Generative adversarial network (GAN) with a specifically-designed loss function for discrete data.
result The proposed model outperforms state-of-the-art models on discrete datasets.
A new IDS method uses GANs to detect anomalies in network traffic.
problem Detecting network anomalies with limited labeled data.
method End-to-end adversarial learning using GANs for semi-supervised learning.
result The method outperforms state-of-the-art IDS approaches.
This paper studies adversarial examples in NIDS, revealing their vulnerability.
problem Vulnerability of machine learning-based NIDS to adversarial examples.
method Used evolutionary computation and deep learning to generate adversarial examples.
result Adversarial examples cause high misclassification rates in various machine learning models.
SynGAN generates synthetic network attacks to improve NIDS effectiveness.
problem Low effectiveness of NIDS due to high false positives and lack of continuous testing.
method SynGAN uses GANs to generate adversarial network attacks based on real attack traffic.
result SynGAN-generated attacks improve NIDS detection rates compared to real attacks.
Generative adversarial networks enable distributed IoT IDS without central controller.
problem Detecting cyber attacks in IoT systems with privacy preservation.
method Proposes a fully distributed GAN-based IDS for IoT.
result Higher accuracy and lower false positive rate compared to standalone IDS.
Enhances network intrusion detection in noisy data.
problem Robustness against contaminated and noisy data inputs in network intrusion detection.
method Probabilistic Temporal Graph Network Support Vector Data Description (TGN-SVDD) model.
result Significant improvements in detection performance with synthetic noise.
Study detects and mitigates stealthy DDoS attacks in IoT networks.
problem Stealthy DDoS attacks in IoT networks.
method Anomaly-based IDS for timely detection and mitigation.
result Demonstrated capability of detecting and mitigating small attack size per source.
Deep learning has recently demonstrated state-of-the art performance on key tasks related to the maintenance of computer systems, such as intrusion detection, denial of service attack detection, hardware and software system failures, and malware detection. In these contexts, model interpretability is vital for administ…
Proposes SOMDAGMM for more accurate network intrusion detection.
problem Inaccurate network intrusion detection in secure network environments.
method Integrates self-organizing map with deep autoencoding Gaussian mixture model.
result SOMDAGMM outperforms state-of-the-art DAGMM with up to 15.58% improvement in F1 score.
Machine learning-based IDSs in ICS are vulnerable to adversarial attacks that can bypass them.
problem Adversarial attacks on machine learning-based IDSs in ICS can lead to undetected cyber attacks.
method Used Jacobian-based Saliency Map attack to generate adversarial samples and explored adversarial training to improve model robustness.
result Classification performance of supervised models decreased by 16-20 percentage points with adversarial samples, but improved with adversarial training.
A new method tunes LOF hyperparameters for better anomaly detection.
problem Tuning hyperparameters for LOF improves anomaly detection performance.
method Heuristic methodology to tune LOF hyperparameters.
result Tuned LOF model outperforms in simulations and real data sets.
Survey of methods to reduce false alarms in IDSs and ADSs.
problem High false alarms in IDSs and ADSs overwhelm administrators.
method Customized anomaly scoring and filtering methods.
result Promising techniques for reducing false alarms exist.
MAD-GAN: Multivariate Anomaly Detection for Time Series Data with Generative Adversarial Networkscs.LG
The prevalence of networked sensors and actuators in many real-world systems such as smart buildings, factories, power plants, and data centers generate substantial amounts of multivariate time series data for these systems. The rich sensor data can be continuously monitored for intrusion events through anomaly detecti…
Evaluation of Adversarial Training on Different Types of Neural Networks in Deep Learning-based IDSscs.LG
Study evaluates adversarial training for deep learning IDSs against various attacks.
problem Evasion attacks against deep learning-based IDSs.
method Investigated adversarial training using min-max approach on CNN and RNN.
result Adversarial training improves robustness against five attack methods.
This paper uses deep learning to improve network threat detection in finance.
problem Detecting unknown threats in large-scale data applications.
method Uses deep learning for advanced threat detection.
result Improves protective measures in the financial industry.
This paper improves AI defenses against network attacks using ML and adversarial learning.
problem Protecting personal data from sophisticated network attacks.
method Unified multi-modal dataset, machine learning for detection, adversarial learning for synthetic data generation.
result Stable ML models for intrusion detection and high-fidelity synthetic data.
Bayesian coresets help reduce network intrusion detection data size.
problem Large network intrusion detection data sets hinder Bayesian learning.
method Use Bayesian coresets to reduce data size while maintaining accuracy.
result Bayesian coresets improve learning accuracy and reduce storage needs.
Active learning improves network intrusion detection with minimal labeled data.
problem Finding new attack vectors in low-volume traffic.
method Proposes an active learning framework to minimize labeled data while improving detection quality.
result Active learning with minimal labeled data significantly improves anomaly detection in network traffic.
This study analyzes wireless network data using classification techniques.
problem Identify normal and abnormal traffic in wireless networks.
method Used WEKA software with predefined anomaly classes from the MAC layer.
result Classification algorithms show success in detecting anomalies.
One-class Collective Anomaly Detection based on Long Short-Term Memory Recurrent Neural Networkscs.LG
Intrusion detection for computer network systems has been becoming one of the most critical tasks for network administrators today. It has an important role for organizations, governments and our society due to the valuable resources hosted on computer networks. Traditional misuse detection strategies are unable to det…
Despite the growing popularity of modern machine learning techniques (e.g. Deep Neural Networks) in cyber-security applications, most of these models are perceived as a black-box for the user. Adversarial machine learning offers an approach to increase our understanding of these models. In this paper we present an appr…
This paper uses β-VAE for unsupervised anomaly detection in NSL-KDD.
problem Unsupervised anomaly detection in network traffic.
method β-VAE with latent space structure and reconstruction error.
result Latent space exploitation is more effective for classification tasks.
In big data era, machine learning is one of fundamental techniques in intrusion detection systems (IDSs). However, practical IDSs generally update their decision module by feeding new data then retraining learning models in a periodical way. Hence, some attacks that comprise the data for training or testing classifiers…
Bayesian Optimization improves machine learning for detecting network attacks.
problem Detecting network attacks to secure critical information.
method Bayesian Optimization for tuning machine learning algorithms (SVM-RBF, RF, k-NN).
result The proposed framework achieves high accuracy and low false alarms.
Machine learning has become an important component for many systems and applications including computer vision, spam filtering, malware and network intrusion detection, among others. Despite the capabilities of machine learning algorithms to extract valuable information from data and produce accurate predictions, it ha…
Paper proposes anomaly detection using Eigentraces and one-class classification.
problem Detect anomalies in system call trace data for Linux OS.
method One-class classification with Eigentraces feature extraction, Radial Basis Function neural network, and Random Forest.
result High performance in detecting anomalies and normal activities.
Extreme banditsstat.ML
Study efficient resource allocation for detecting extreme values.
problem Efficiently allocate limited resources to detect extreme values in various fields.
method Proposes ExtremeHunter algorithm for sequential resource allocation under limited feedback.
result Demonstrates ExtremeHunter outperforms oracle policy in detecting extreme values.
This paper presents a method called One-class Classification using Length statistics of Emerging Patterns Plus (OCLEP+).
Operator inference for non-intrusive model reduction of systems with non-polynomial nonlinear termsmath.NA
New method learns low-dimensional models for systems with non-polynomial terms.
problem Modeling systems with non-polynomial nonlinear terms that are spatially local and given in analytic form.
method Non-intrusive model reduction method that learns operators for linear and polynomially nonlinear dynamics via a least-squares problem incorporating given non-polynomial terms.
result Comparable accuracy to intrusive methods that require full knowledge of governing equations.