χ2-BidLSTM: A Feature Driven Intrusion Detection System Based on χ2 Statistical Model and Bidirectional LSTM

Sensors

Seifedine Kadry¹  Sangsoon Lim²  Yu-Chen Hu³  Zaharawu Abdul-Rauf⁴  Liaqat Ali⁵  Yanping Xiang⁶  Yakubu Imrana⁶ 

[1] Department of Applied Data Science, Noroff University College, 4612 Kristiansand, Norway;Department of Computer Engineering, Sungkyul University, Anyang 14097, Korea;Department of Computer Science Information Management, Providence University, Taichung City 433, Taiwan;Department of Education, University for Development Studies (UDS), Tamale P.O. Box TL 1350, Ghana;Department of Electrical Engineering, University of Science and Technology, Bannu 28100, Pakistan;School of Computer Science and Engineering, University of Electronic Science and Technology of China (UESTC), Chengdu 611731, China;

关键词: deep learning;    feature selection;    intrusion detection systems;    chi-square;    bidirectional LSTM;   

DOI  :  10.3390/s22052018

来源: DOAJ

【 摘 要 】

In a network architecture, an intrusion detection system (IDS) is one of the most commonly used approaches to secure the integrity and availability of critical assets in protected systems. Many existing network intrusion detection systems (NIDS) utilize stand-alone classifier models to classify network traffic as an attack or as normal. Due to the vast data volume, these stand-alone models struggle to reach higher intrusion detection rates with low false alarm rates( FAR). Additionally, irrelevant features in datasets can also increase the running time required to develop a model. However, data can be reduced effectively to an optimal feature set without information loss by employing a dimensionality reduction method, which a classification model then uses for accurate predictions of the various network intrusions. In this study, we propose a novel feature-driven intrusion detection system, namely $\chi 2$-BidLSTM, that integrates a $\chi 2$ statistical model and bidirectional long short-term memory (BidLSTM). The NSL-KDD dataset is used to train and evaluate the proposed approach. In the first phase, the $\chi 2$-BidLSTM system uses a $\chi 2$ model to rank all the features, then searches an optimal subset using a forward best search algorithm. In next phase, the optimal set is fed to the BidLSTM model for classification purposes. The experimental results indicate that our proposed $\chi 2$-BidLSTM approach achieves a detection accuracy of 95.62% and an F-score of 95.65%, with a low FAR of 2.11% on NSL-KDDTest⁺. Furthermore, our model obtains an accuracy of 89.55%, an F-score of 89.77%, and an FAR of 2.71% on NSL-KDDTest⁻²¹, indicating the superiority of the proposed approach over the standard LSTM method and other existing feature-selection-based NIDS methods.

【 授权许可】

Unknown