用新型优化算法提升云安全入侵检测,准确率超99%。
AI-Powered Hybrid Intrusion Detection Framework for Cloud Security Using Novel Metaheuristic Optimization
- 用能量谷优化器筛选特征,将88维降到38维,效率大幅提升。
- 在两个真实数据集上实现99.13%~99.78%的准确率,对少数攻击检测效果好。
- 适合关注云安全、异常检测的工程师和研究人员。
云计算面临严峻的网络安全挑战,尤其在入侵检测系统(IDS)方面,存在数据偏斜和分类模型性能不佳的问题。本文提出混合入侵检测系统(HyIDS),采用新型能量谷优化器(EVO)进行特征选择,将CIC-DDoS2019数据集特征从88维降至38维,CSE-CIC-IDS2018数据集从80维降至43维,显著提升计算效率。系统融合支持向量机(SVM)、随机森林(RF)、决策树(D_Tree)和K近邻(KNN)四种机器学习模型。针对两类数据集存在的严重类别不平衡问题,采用下采样技术平衡样本。经24次实验验证,所提D_TreeEVO模型在CIC-DDoS2019上达到99.13%准确率和98.94%F1分数,在CSE-CIC-IDS2018上达99.78%准确率和99.70%F1分数,显著提升云环境下的安全防护能力。
原文摘要 · Abstract (English)
Cybersecurity poses considerable problems to Cloud Computing (CC), especially regarding Intrusion Detection Systems (IDSs), facing difficulties with skewed datasets and suboptimal classification model performance. This study presents the Hybrid Intrusion Detection System (HyIDS), an innovative IDS that employs the Energy Valley Optimizer (EVO) for Feature Selection (FS). Additionally, it introduces a novel technique for enhancing the cybersecurity of cloud computing through the integration of machine learning methodologies with the EVO Algorithm. The Energy Valley Optimizer (EVO) effectively diminished features in the CIC-DDoS2019 dataset from 88 to 38 and in the CSE-CIC-IDS2018 data from 80 to 43, significantly enhancing computing efficiency. HyIDS incorporates four Machine Learning (ML) models: Support Vector Machine (SVM), Random Forest (RF), Decision Tree (D_Tree), and K-Nearest Neighbors (KNN). The proposed HyIDS was assessed utilizing two real-world intrusion datasets, CIC-DDoS2019 and CSE-CIC-IDS2018, both distinguished by considerable class imbalances. The CIC-DDoS2019 dataset has a significant imbalance between DDoS assault samples and legal traffic, while the CSE-CIC-IDS2018 dataset primarily comprises benign traffic with insufficient representation of attack types, complicating the detection of minority attacks. A downsampling technique was employed to balance the datasets, hence improving detection efficacy for both benign and malicious traffic. Twenty-four trials were done, revealing substantial enhancements in categorization accuracy, precision, and recall. Our suggested D_TreeEVO model attained an accuracy rate of 99.13% and an F1 score of 98.94% on the CIC-DDoS2019 dataset, and an accuracy rate of 99.78% and an F1 score of 99.70% on the CSE-CIC-IDS2018 data. These data demonstrate that EVO significantly improves cybersecurity in Cloud Computing (CC).
Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。