PCCN: Parallel Cross Convolutional Neural Network for Abnormal Network Traffic Flows Detection in Multi-Class Imbalanced Network Traffic Flows
Network attack behavior detection using deep learning is an important research topic in the field of network security. Currently, there are still many challenges in detecting multi-class imbalanced abnormal traffic data. This paper proposed a new intrusion detection network based on deep learning, n...
| Main Authors: | , , , , , |
|---|---|
| Format: | Article |
| Language: | English |
| Published: |
IEEE
2019-01-01
|
| Series: | IEEE Access |
| Subjects: | |
| Online Access: | https://ieeexplore.ieee.org/document/8787567/ |
| _version_ | 1818566002094374912 |
|---|---|
| author | Yong Zhang Xu Chen Da Guo Mei Song Yinglei Teng Xiaojuan Wang |
| author_facet | Yong Zhang Xu Chen Da Guo Mei Song Yinglei Teng Xiaojuan Wang |
| author_sort | Yong Zhang |
| collection | DOAJ |
| description | Network attack behavior detection using deep learning is an important research topic in the field of network security. Currently, there are still many challenges in detecting multi-class imbalanced abnormal traffic data. This paper proposed a new intrusion detection network based on deep learning, named parallel cross convolutional neural network (PCCN), to improve the detection performance of imbalanced abnormal flows. By fusing the flow features learned from the two branch convolutional neural networks (CNN), PCCN can better learn the flow features with fewer samples, to improve the detection results of the imbalanced abnormal flows. We proposed an improved feature extraction method of the original flow to extract multi-class flow features at the same time. The proposed algorithm not only reduces the number of useless elements for network learning, but also accelerates network convergence. In addition, we proposed four improved versions of the PCCN network structure to meet the real-time requirements of network intrusion detection in the current big data computing. These networks can achieve almost the same detection results as the PCCN, but greatly reduce the detection time of data. Through the analysis of high-order evaluation metrics, the proposed PCCN algorithm is significantly better than the traditional machine learning algorithms. Compared with the current hierarchical network model, PCCN can also achieve better performance in term of overall accuracy. |
| first_indexed | 2024-12-14T01:48:07Z |
| format | Article |
| id | doaj.art-ed03fe6f474e4586bd52cbf1f33bdc6f |
| institution | Directory Open Access Journal |
| issn | 2169-3536 |
| language | English |
| last_indexed | 2024-12-14T01:48:07Z |
| publishDate | 2019-01-01 |
| publisher | IEEE |
| record_format | Article |
| series | IEEE Access |
| spelling | doaj.art-ed03fe6f474e4586bd52cbf1f33bdc6f2022-12-21T23:21:28ZengIEEEIEEE Access2169-35362019-01-01711990411991610.1109/ACCESS.2019.29331658787567PCCN: Parallel Cross Convolutional Neural Network for Abnormal Network Traffic Flows Detection in Multi-Class Imbalanced Network Traffic FlowsYong Zhang0https://orcid.org/0000-0003-4997-698XXu Chen1https://orcid.org/0000-0003-0862-3264Da Guo2Mei Song3Yinglei Teng4Xiaojuan Wang5School of Electronic Engineering, Beijing University of Posts and Telecommunications, Beijing, ChinaSchool of Electronic Engineering, Beijing University of Posts and Telecommunications, Beijing, ChinaSchool of Electronic Engineering, Beijing University of Posts and Telecommunications, Beijing, ChinaSchool of Electronic Engineering, Beijing University of Posts and Telecommunications, Beijing, ChinaSchool of Electronic Engineering, Beijing University of Posts and Telecommunications, Beijing, ChinaSchool of Electronic Engineering, Beijing University of Posts and Telecommunications, Beijing, ChinaNetwork attack behavior detection using deep learning is an important research topic in the field of network security. Currently, there are still many challenges in detecting multi-class imbalanced abnormal traffic data. This paper proposed a new intrusion detection network based on deep learning, named parallel cross convolutional neural network (PCCN), to improve the detection performance of imbalanced abnormal flows. By fusing the flow features learned from the two branch convolutional neural networks (CNN), PCCN can better learn the flow features with fewer samples, to improve the detection results of the imbalanced abnormal flows. We proposed an improved feature extraction method of the original flow to extract multi-class flow features at the same time. The proposed algorithm not only reduces the number of useless elements for network learning, but also accelerates network convergence. In addition, we proposed four improved versions of the PCCN network structure to meet the real-time requirements of network intrusion detection in the current big data computing. These networks can achieve almost the same detection results as the PCCN, but greatly reduce the detection time of data. Through the analysis of high-order evaluation metrics, the proposed PCCN algorithm is significantly better than the traditional machine learning algorithms. Compared with the current hierarchical network model, PCCN can also achieve better performance in term of overall accuracy.https://ieeexplore.ieee.org/document/8787567/Network intrusion detectioncross networkdeep learningfeature fusion |
| spellingShingle | Yong Zhang Xu Chen Da Guo Mei Song Yinglei Teng Xiaojuan Wang PCCN: Parallel Cross Convolutional Neural Network for Abnormal Network Traffic Flows Detection in Multi-Class Imbalanced Network Traffic Flows IEEE Access Network intrusion detection cross network deep learning feature fusion |
| title | PCCN: Parallel Cross Convolutional Neural Network for Abnormal Network Traffic Flows Detection in Multi-Class Imbalanced Network Traffic Flows |
| title_full | PCCN: Parallel Cross Convolutional Neural Network for Abnormal Network Traffic Flows Detection in Multi-Class Imbalanced Network Traffic Flows |
| title_fullStr | PCCN: Parallel Cross Convolutional Neural Network for Abnormal Network Traffic Flows Detection in Multi-Class Imbalanced Network Traffic Flows |
| title_full_unstemmed | PCCN: Parallel Cross Convolutional Neural Network for Abnormal Network Traffic Flows Detection in Multi-Class Imbalanced Network Traffic Flows |
| title_short | PCCN: Parallel Cross Convolutional Neural Network for Abnormal Network Traffic Flows Detection in Multi-Class Imbalanced Network Traffic Flows |
| title_sort | pccn parallel cross convolutional neural network for abnormal network traffic flows detection in multi class imbalanced network traffic flows |
| topic | Network intrusion detection cross network deep learning feature fusion |
| url | https://ieeexplore.ieee.org/document/8787567/ |
| work_keys_str_mv | AT yongzhang pccnparallelcrossconvolutionalneuralnetworkforabnormalnetworktrafficflowsdetectioninmulticlassimbalancednetworktrafficflows AT xuchen pccnparallelcrossconvolutionalneuralnetworkforabnormalnetworktrafficflowsdetectioninmulticlassimbalancednetworktrafficflows AT daguo pccnparallelcrossconvolutionalneuralnetworkforabnormalnetworktrafficflowsdetectioninmulticlassimbalancednetworktrafficflows AT meisong pccnparallelcrossconvolutionalneuralnetworkforabnormalnetworktrafficflowsdetectioninmulticlassimbalancednetworktrafficflows AT yingleiteng pccnparallelcrossconvolutionalneuralnetworkforabnormalnetworktrafficflowsdetectioninmulticlassimbalancednetworktrafficflows AT xiaojuanwang pccnparallelcrossconvolutionalneuralnetworkforabnormalnetworktrafficflowsdetectioninmulticlassimbalancednetworktrafficflows |