A two-stage intrusion detection system with auto-encoder and LSTMs

Curse of dimensionality' and the trade-off between low false alarm rate and high detection rate are the major concerns while designing an efficient intrusion detection system. In this study, we propose a hybrid framework comprising deep auto-encoder (AE) with the long short term memory (LSTM) and the bidirectional long short term memory (Bi-LSTM) for intrusion detection system by obtaining optimal features using AE and then LSTMs for classification into normal and anomaly samples. The performance of the proposed models is evaluated on the well-known dataset NSL-KDD in terms of error indices including precision, recall, F-score, accuracy, detection rate (DR), and false alarm rate (FAR). Experimental results indicate that the proposed AE-LSTM performance is significantly better with less prediction error as compared to other deep and shallow machine learning techniques including other recently reported methods. On the NSL-KDD dataset, AE-LSTM shows classification accuracy of 89% with DR of 89.84% and FAR of 11% which demonstrates the enhanced performance of the proposed model over recent state-of-the-art techniques. (C) 2022 Elsevier B.V. All rights reserved.

Automated summary

This study proposes a hybrid framework for intrusion detection system using a combination of deep auto-encoder (AE) and long short term memory (LSTM). Experimental results show that the proposed AE-LSTM model achieves higher classification accuracy and detection rate on the NSL-KDD dataset compared to other deep and shallow machine learning techniques, indicating its superior performance.