Title
A Continuous Learning Approach for Real-Time Network Intrusion Detection
Abstract
Network intrusion detection is becoming a challenging task with cyberattacks that are becoming more and more sophisticated. Failing the prevention or detection of such intrusions might have serious consequences. Machine learning approaches try to recognize network connection patterns to classify unseen and known intrusions but also require periodic re-training to keep the performances at a high level. In this paper, a novel continuous learning intrusion detection system, called Soft-Forgetting Self-Organizing Incremental Neural Network (SF-SOINN), is introduced. SF-SOINN, besides providing continuous learning capabilities, is able to perform fast classification, is robust to noise, and it obtains good performances with respect to the existing approaches. The main characteristic of SF-SOINN is the ability to remove nodes from the neural network based on their utility estimate. SF-SOINN has been validated on the well-known NSL-KDD and CIC-IDS-2017 intrusion detection datasets as well as on some artificial data to show the classification capability on more general tasks.
Year
DOI
Venue
2021
10.1142/S012906572150060X
INTERNATIONAL JOURNAL OF NEURAL SYSTEMS
Keywords
DocType
Volume
Machine learning, continuous learning, cybersecurity, intrusion detection
Journal
31
Issue
ISSN
Citations 
12
0129-0657
0
PageRank 
References 
Authors
0.34
0
2
Name
Order
Citations
PageRank
Marcello Rinaldo Martina100.34
Gian Luca Foresti2447.06