Network Intrusion Detection Using Deep Learning Approaches

As the scale of cyber-attacks and volume of network data increases exponentially,organizations must develop new ways of keeping their networks and data secure from the dynamic nature of evolving threat actors.With more security tools and sensors being deployed within the modern-day enterprise network,the amount of security event and alert data being generated continues to increase,making it more difficult to find the needle in the haystack.Organizations must rely on new techniques to assist and augment human analysts when dealing with the monitoring,prevention,detection,and response to cyber security events and potential attacks on their networks.In this work the focus on classifying network traffic flows as benign or malicious.First,a feed forward fully connected Deep Neural Network(DNN)is used to train a Network Intrusion Detection System(NIDS)via supervised learning.Deep neural network models are trained using two more recent intrusion detection datasets that overcome limitations of other intrusion detection datasets which have been commonly used in the past.Using these more recent datasets,deep neural networks are shown to be highly effective in performing supervised learning to detect and classify modern-day cyber-attacks with a high degree of accuracy,high detection rate,and low false positive rate.