Intelligent Techniques for Detecting Network Attacks: Review and Research Directions

Abstract

The significant growth in the use of the Internet and the rapid development of network technologies are associated with an increased risk of network attacks. Network attacks refer to all types of unauthorized access to a network including any attempts to damage and disrupt the network, often leading to serious consequences. Network attack detection is an active area of research in the community of cybersecurity. In the literature, there are various descriptions of network attack detection systems involving various intelligent-based techniques including machine learning (ML) and deep learning (DL) models. However, although such techniques have proved useful within specific domains, no technique has proved useful in mitigating all kinds of network attacks. This is because some intelligent-based approaches lack essential capabilities that render them reliable systems that are able to confront different types of network attacks. This was the main motivation behind this research, which evaluates contemporary intelligent-based research directions to address the gap that still exists in the field. The main components of any intelligent-based system are the training datasets, the algorithms, and the evaluation metrics; these were the main benchmark criteria used to assess the intelligent-based systems included in this research article. This research provides a rich source of references for scholars seeking to determine their scope of research in this field. Furthermore, although the paper does present a set of suggestions about future inductive directions, it leaves the reader free to derive additional insights about how to develop intelligent-based systems to counter current and future network attacks.

Detecting Malicious URLs Using Machine Learning Techniques: Review and Research Directions

“…Certain features must be available to analysts in order to create proactive models to identify malicious URLs. Simple URL strings can be used to extract these features, which can be lexical, content, or network [6], [7].…”

Performance evaluation of machine learning models for distributed denial of service attack detection using improved feature selection and hyper‐parameter optimization techniques

“…[44][45][46][47][48] To forecast what features to take and what feature selection method to use is a difficult task in itself especially when many machines learning models and feature selection methods are available. The authors [40][41][42][43] predicted many optimal feature selection methods and using benchmark dataset but could not attain the efficient results. The selection of effective predictors prior to training the classifier on a large dataset produce better results than the classifiers using ineffective feature selection method.…”

“…Yuan et al40 proposed deep defense, which is a deep learning-based DDoS attack detection that studies the network traffic sequence patterns and trace the network attack activities. They have used UNB-ISCX intrusion detection evaluation 2012 (ISCX2012) dataset.…”

Securing 6G-enabled IoT/IoV networks by machine learning and data fusion

“…Instance-based clustering [1] is not in the coverage of this work, with the similar reason that edge devices are usually not able to store too many history data.…”