| Full text | |
| Author(s): |
Meyer, Bruno H.
;
Pozo, Aurora T. R.
;
Nogueira, Michele
;
Zola, Wagner M. Nunan
Total Authors: 4
|
| Document type: | Journal article |
| Source: | 2025 IEEE SYMPOSIUM ON COMPUTATIONAL INTELLIGENCE IN SECURITY, DEFENCE AND BIOMETRICS, CISDB; v. N/A, p. 7-pg., 2025-01-01. |
| Abstract | |
This paper presents a comparative analysis of three data representation methods for improving Intrusion Detection Systems (IDS). The methods compared are autoencoders, Generative Adversarial Networks (GANs), and contrastive learning. Additionally, a baseline approach using raw input data is evaluated. The study is conducted on three well-known IDS datasets: NSL-KDD, Ton-IoT, and Bot-IoT, each with distinct characteristics. Our results demonstrate that representational methods significantly enhance classification performance, particularly when ample unlabeled data is available. Among the methods, GANs achieved the highest f1-score improvements in the Ton-IoT dataset, while contrastive learning excelled in the Bot-IoT dataset. The experiments also reveal that the choice of classifier impacts performance, with Random Forest performing best on raw data and Multi-Layer Perceptrons (MLP) excelling with transformed data. The study highlights the importance of selecting appropriate representation learning techniques and classifiers based on dataset characteristics. It emphasizes the potential of unsupervised learning methods to utilize large volumes of unlabeled data, a common scenario in real-world cybersecurity applications. The findings provide a foundation for future research in leveraging unsupervised learning for IDS and other cybersecurity challenges. (AU) | |
| FAPESP's process: | 21/04431-2 - Improvement and configuration of the islands in the cybersecurity IoT testbed |
| Grantee: | Bruno Henrique Meyer |
| Support Opportunities: | Scholarships in Brazil - Technical Training Program - Technical Training |
| FAPESP's process: | 18/23098-0 - MENTORED: from modeling to experimentation - predicting and detecting DDoS and zero-day attacks |
| Grantee: | Michele Nogueira Lima |
| Support Opportunities: | Research Projects - Thematic Grants |