Automatic Intrusion Detection System Using Deep Recurrent Neural Network Paradigm

Abstract

Network security field had gained research community attention in the last decade due to its growing importance. This paper addresses directly one vital problem in that field is “Intrusion Detection System” (IDS). As much as many researchers tackle this problem, many challenges arise while converting this research to reliable automatic system. The biggest challenge is to make the system works with low false alarm with new unseen threats. In this paper, we address this challenge by building a descriptive model using different models of deep Recurrent Neural Network (RNNs). (RNN) models has the ability to generalize the knowledge that can be used to identify seen and unseen threats. This generalization comes from RNN capabilities to define in its terms the normal behavior and the deviation accepted to be normal. Four different models of RNN were tested on a benchmark dataset, NSL-KDD, which is a standard test dataset for network intrusion. The proposed system showed superiority over other previously developed systems according to the standard measurements: accuracy, recall, precision and f-measure.