Preliminary study on artificial intelligence methods for cybersecurity threat detection in computer networks based on raw data packets
Fuente:
arXiv
Saved in:
| Main Authors: | , , , , , , , |
|---|---|
| Format: | Preprint |
| Published: |
2024
|
| Subjects: | |
| Online Access: | |
| Tags: |
Add Tag
No Tags, Be the first to tag this record!
|
| _version_ | 1866914131474382848 |
|---|---|
| author | Ogonowski, Aleksander Żebrowski, Michał Ćwiek, Arkadiusz Jarosiewicz, Tobiasz Klimaszewski, Konrad Padee, Adam Wasiuk, Piotr Wójcik, Michał |
| author_facet | Ogonowski, Aleksander Żebrowski, Michał Ćwiek, Arkadiusz Jarosiewicz, Tobiasz Klimaszewski, Konrad Padee, Adam Wasiuk, Piotr Wójcik, Michał |
| contents | Most of the intrusion detection methods in computer networks are based on traffic flow characteristics. However, this approach may not fully exploit the potential of deep learning algorithms to directly extract features and patterns from raw packets. Moreover, it impedes real-time monitoring due to the necessity of waiting for the processing pipeline to complete and introduces dependencies on additional software components.
In this paper, we investigate deep learning methodologies capable of detecting attacks in real-time directly from raw packet data within network traffic. We propose a novel approach where packets are stacked into windows and separately recognised, with a 2D image representation suitable for processing with computer vision models. Our investigation utilizes the CIC IDS-2017 dataset, which includes both benign traffic and prevalent real-world attacks, providing a comprehensive foundation for our research. |
| format | Preprint |
| id |
arxiv_https___arxiv_org_abs_2407_17339 |
| institution | arXiv |
| publishDate | 2024 |
| record_format | arxiv |
| spellingShingle | Preliminary study on artificial intelligence methods for cybersecurity threat detection in computer networks based on raw data packets Ogonowski, Aleksander Żebrowski, Michał Ćwiek, Arkadiusz Jarosiewicz, Tobiasz Klimaszewski, Konrad Padee, Adam Wasiuk, Piotr Wójcik, Michał Computer Vision and Pattern Recognition Artificial Intelligence Cryptography and Security I.5.4; C.2.0; I.2.1 Most of the intrusion detection methods in computer networks are based on traffic flow characteristics. However, this approach may not fully exploit the potential of deep learning algorithms to directly extract features and patterns from raw packets. Moreover, it impedes real-time monitoring due to the necessity of waiting for the processing pipeline to complete and introduces dependencies on additional software components. In this paper, we investigate deep learning methodologies capable of detecting attacks in real-time directly from raw packet data within network traffic. We propose a novel approach where packets are stacked into windows and separately recognised, with a 2D image representation suitable for processing with computer vision models. Our investigation utilizes the CIC IDS-2017 dataset, which includes both benign traffic and prevalent real-world attacks, providing a comprehensive foundation for our research. |
| title | Preliminary study on artificial intelligence methods for cybersecurity threat detection in computer networks based on raw data packets |
| topic | Computer Vision and Pattern Recognition Artificial Intelligence Cryptography and Security I.5.4; C.2.0; I.2.1 |
| url | https://arxiv.org/abs/2407.17339 |