arrow
返回

An active learning framework using deep Q-network for zero-day attack detection

delete2024-04-01
delete4
PRE
AI
Y
Yali Wu *
Y
Yanghu Hu
J
Junhu Wang
M
Mengqi Feng
A
Ang Dong
Y
Yanxi Yang
DOI:10.1016/j.cose.2024.103713delete
delete原文链接
delete原文求助
delete分享
delete收藏
摘要

摘要

En 中文
Zero-day attacks from highly dynamic and complex cyberspace make severe threats to the existing network intrusion detection systems. Robust and intelligent solutions are required to handle the rapidly evolving threats from internet environment. In this paper, a novel active learning framework based on Deep Q-Network (DQN) is proposed for zero-day attacks detection. The framework is composed of network intrusion detection systems classifier, sample selection strategy and annotator. Deep Q-Network model serves as an intelligent control component to select the zero-day samples for labeling with the probability distribution. Moreover, the Bidirectional Long Short-Term Memory (BiLSTM) network is integrated into DQN model to form the selecting policy to analyze the temporal correlation within the static classification context. Meanwhile, Euclidean distance function is adopted for labeling the selected samples to achieve an accurate labeling result. Two famous datasets named NSL_KDD and UNSW_NB15 in intrusion detection field are tested for evaluate the performance of our proposed framework. Compared to other machine learning methods, the approach proposed in this paper demonstrates better universality and generalizability. This indicates that the method is more capable of reliably identifying and detecting network intrusion behaviors, which holds significant importance for further security research and practical applications.
Keyword:
Network intrusion detection systems
Active learning
Deep Q -network
Annotator

期刊

C
Computers and Security
IF:
5.4
论文数:
4.6K
被引数:
1.4W

机构

暂无机构信息
引用论文

引用论文

Towards improved cleaning of FMCG plants: a model-based approach
err2008-01-01
err0
PREAI
errA. Yang; E.B. Martin; G.A. Montague; P.J. Fryer
err分享
err收藏
err分享
err收藏
err分享
err收藏
A model of selective synapse formation in sympathetic ganglia
err2004-10-11
err0
PREAI
errKnut Liestøl; Jan Mæhlen; Arild Njå
err分享
err收藏
学者 查看更多内容