Title
STIDM: A Spatial and Temporal Aware Intrusion Detection Model
Abstract
Network intrusion detection plays a critical role in cyberspace security. Most existing conventional detection methods mostly rely on manually-designed features to detect intrusion behaviours from large-scale flow data. Recent studies show that deep learning-based methods are effective for network intrusion detection due to the ability to learn discriminative features from data automatically. However, these models ignore the problem of the irregular time intervals between packets in a flow, causing the degradation of detection performance. To this end, we propose a Spatial and Temporal Aware Intrusion Detection model (STIDM). The proposed STIDM model first uses a one-dimensional Convolutional Neural Network (1D-CNN) to extract spatial features based on the nature of flow and packet. Then we design a Time and Length sensitive LSTM (TL-LSTM) method to learn richer temporal features from the irregular flows. The two parts are trained simultaneously to achieve global optimum. Through extensive experiments on the ISCX2012 dataset and the CICIDS2017 dataset, we demonstrate that STIDM outperforms state-of-the-art models.
Year
DOI
Venue
2020
10.1109/TrustCom50675.2020.00058
2020 IEEE 19th International Conference on Trust, Security and Privacy in Computing and Communications (TrustCom)
Keywords
DocType
ISSN
intrusion detection,convolutional neural network,long short-term memory,time irregularity,feature extraction
Conference
2324-898X
ISBN
Citations 
PageRank 
978-1-6654-0393-1
1
0.36
References 
Authors
0
8
Name
Order
Citations
PageRank
Xueying Han110.36
Rongchao Yin210.36
Zhigang Lu341.44
Bo Jiang4114.54
Yuling Liu575.63
Song Liu610.36
Chonghua Wang711.03
Ning Li814548.40