论文标题
G-IDS:生成对抗网络辅助入侵检测系统
G-IDS: Generative Adversarial Networks Assisted Intrusion Detection System
论文作者
论文摘要
网络物理系统(CPS)和物联网(IoT)的边界每天融合在一起,在混合系统上引入一个共同的平台。此外,人工智能(AI)与CPS的结合创造了技术进步的新维度。所有这些连接性和可靠性为攻击者发起网络攻击创造了巨大的空间。为了防止这些攻击,入侵检测系统(IDS)已被广泛使用。但是,新兴的CPS技术遭受了不平衡和缺失的样本数据的困扰,这使得对ID的培训变得困难。在本文中,我们提出了一个基于生成的对抗网络(GAN)的入侵检测系统(G-IDS),其中GAN生成合成样本,并且IDS与原始样本一起对其进行了训练。 G-IDS还解决了不平衡或缺少数据问题的困难。我们使用NSL KDD-99数据集为新兴CPS建模网络安全数据集,并使用不同的指标评估我们所提出的模型的性能。我们发现,与独立ID相比,我们提出的G-IDS模型在训练过程中的攻击检测和模型稳定性表现要好得多。
The boundaries of cyber-physical systems (CPS) and the Internet of Things (IoT) are converging together day by day to introduce a common platform on hybrid systems. Moreover, the combination of artificial intelligence (AI) with CPS creates a new dimension of technological advancement. All these connectivity and dependability are creating massive space for the attackers to launch cyber attacks. To defend against these attacks, intrusion detection system (IDS) has been widely used. However, emerging CPS technologies suffer from imbalanced and missing sample data, which makes the training of IDS difficult. In this paper, we propose a generative adversarial network (GAN) based intrusion detection system (G-IDS), where GAN generates synthetic samples, and IDS gets trained on them along with the original ones. G-IDS also fixes the difficulties of imbalanced or missing data problems. We model a network security dataset for an emerging CPS using NSL KDD-99 dataset and evaluate our proposed model's performance using different metrics. We find that our proposed G-IDS model performs much better in attack detection and model stabilization during the training process than a standalone IDS.