RNN-VED for Reducing False Positive Alerts in Host-based Anomaly Detection Systems

Bouzar-Benlabiod, Lydia; Rubin, Stuart H.; Belaidi, Kahina; Haddar, Nour ElHouda

doi:10.1109/iri49571.2020.00011

Cited by 4 publications

(1 citation statement)

References 21 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…C61 [94] ADFA-LD dataset e model uses VED on the first stage to reconstruct the dataset and the RNN is used for capacity memorization. e model recorded a low false-positive rate compared with other models.…”

Section: C60mentioning

confidence: 99%

A Systematic Review on Hybrid Intrusion Detection System

Maseno

Wang

Xing

2022

Security and Communication Networks

View full text Add to dashboard Cite

As computer networks keep growing at a high rate, achieving confidentiality, integrity, and availability of the information system is essential. Intrusion detection systems (IDSs) have been widely used to monitor and secure networks. The two major limitations facing existing intrusion detection systems are high rates of false-positive alerts and low detection rates on zero-day attacks. To overcome these problems, we need intrusion detection techniques that can learn and effectively detect intrusions. Hybrid methods based on machine learning techniques have been proposed by different researchers. These methods take advantage of the single detection methods and leverage their weakness. Therefore, this paper reviews 111 related studies in the period between 2012 and 2022 focusing on hybrid detection systems. The review points out the existing gaps in the development of hybrid intrusion detection systems and the need for further research in this area.

show abstract

Section: C60mentioning

confidence: 99%