Hybrid BP/CNN neural network for intrusion detection

Abstract

In order to improve the intrusion detection rates and reduce false positives, a hybrid BP/CNN neural network is constructed, which has both the capability of real-time classification which BP has and the functionality of time-delay, collection and judgment which chaotic neuron has. Because this intrusion detection approach has flexible time-delay characteristic, it corresponds to the requirement of intrusion detection nowadays. The simulation tests to FTP brute-force attacks are conducted using samples captured from data traffic in local computer network. The test results are drawn by ROC curves. The intrusion criterion with high rate intrusion detection and low rates of false alarms can be found. The intrusion detection approach in this paper may be generalized to other intrusion detection systems.