Research Article
The Role of CNN for Intrusion Detection Systems: An Improved CNN Learning Approach for SDNs
@INPROCEEDINGS{10.1007/978-3-030-78459-1_7, author={Mahmoud Said Elsayed and Hamed Z. Jahromi and Muhammad Mohsin Nazir and Anca Delia Jurcut}, title={The Role of CNN for Intrusion Detection Systems: An Improved CNN Learning Approach for SDNs}, proceedings={Future Access Enablers for Ubiquitous and Intelligent Infrastructures. 5th EAI International Conference, FABULOUS 2021, Virtual Event, May 6--7, 2021, Proceedings}, proceedings_a={FABULOUS}, year={2021}, month={6}, keywords={Intrusion Intrusion Detection System (IDS) Machine learning Software-defined Networking (SDN) Convolutional Neural Network (CNN) Overffiting problem}, doi={10.1007/978-3-030-78459-1_7} }- Mahmoud Said Elsayed
Hamed Z. Jahromi
Muhammad Mohsin Nazir
Anca Delia Jurcut
Year: 2021
The Role of CNN for Intrusion Detection Systems: An Improved CNN Learning Approach for SDNs
FABULOUS
Springer
DOI: 10.1007/978-3-030-78459-1_7
Abstract
An intrusion detection system (IDS) is an essential component of computer networks to detect and secure the system and environment from malicious activities and anomalous attacks. The convolutional neural network (CNN) is a popular deep learning algorithm that has been broadly applied in the field of computer vision. More recently, several researchers attempted to apply CNN for IDSs. However, the majority of these ignore the influence of the overfitting problem with the implementation of deep learning algorithms, which can impact the robustness of CNN-based anomaly detection systems. In this paper, we investigate the use of CNN for IDSs and propose a technique to enhance its performance by using two popular regularization techniques to address the overfitting problem. Our technique improves the capability of IDSs in detection of unseen intrusion events. We use InSDN benchmark dataset to train and evaluate the performance of our technique. The experimental results demonstrate that the regularization methods can improve the performance of CNN-based anomaly detection models for the software-defined networking (SDN) environment.
