Binary and Multiclass Cyberattack Classification on GeNIS Dataset

Fuente: arXiv
Saved in:
Bibliographic Details
Main Authors: Silva, Miguel, Pinto, Daniela, Vitorino, João, Maia, Eva, Praça, Isabel, Amorim, Ivone, Viamonte, Maria João
Format: Preprint
Published: 2025
Subjects:
Online Access:
Tags: Add Tag
No Tags, Be the first to tag this record!
_version_ 1866915612180086784
author Silva, Miguel
Pinto, Daniela
Vitorino, João
Maia, Eva
Praça, Isabel
Amorim, Ivone
Viamonte, Maria João
author_facet Silva, Miguel
Pinto, Daniela
Vitorino, João
Maia, Eva
Praça, Isabel
Amorim, Ivone
Viamonte, Maria João
contents The integration of Artificial Intelligence (AI) in Network Intrusion Detection Systems (NIDS) is a promising approach to tackle the increasing sophistication of cyberattacks. However, since Machine Learning (ML) and Deep Learning (DL) models rely heavily on the quality of their training data, the lack of diverse and up-to-date datasets hinders their generalization capability to detect malicious activity in previously unseen network traffic. This study presents an experimental validation of the reliability of the GeNIS dataset for AI-based NIDS, to serve as a baseline for future benchmarks. Five feature selection methods, Information Gain, Chi-Squared Test, Recursive Feature Elimination, Mean Absolute Deviation, and Dispersion Ratio, were combined to identify the most relevant features of GeNIS and reduce its dimensionality, enabling a more computationally efficient detection. Three decision tree ensembles and two deep neural networks were trained for both binary and multiclass classification tasks. All models reached high accuracy and F1-scores, and the ML ensembles achieved slightly better generalization while remaining more efficient than DL models. Overall, the obtained results indicate that the GeNIS dataset supports intelligent intrusion detection and cyberattack classification with time-based and quantity-based behavioral features.
format Preprint
id arxiv_https___arxiv_org_abs_2511_08660
institution arXiv
publishDate 2025
record_format arxiv
spellingShingle Binary and Multiclass Cyberattack Classification on GeNIS Dataset
Silva, Miguel
Pinto, Daniela
Vitorino, João
Maia, Eva
Praça, Isabel
Amorim, Ivone
Viamonte, Maria João
Cryptography and Security
Artificial Intelligence
The integration of Artificial Intelligence (AI) in Network Intrusion Detection Systems (NIDS) is a promising approach to tackle the increasing sophistication of cyberattacks. However, since Machine Learning (ML) and Deep Learning (DL) models rely heavily on the quality of their training data, the lack of diverse and up-to-date datasets hinders their generalization capability to detect malicious activity in previously unseen network traffic. This study presents an experimental validation of the reliability of the GeNIS dataset for AI-based NIDS, to serve as a baseline for future benchmarks. Five feature selection methods, Information Gain, Chi-Squared Test, Recursive Feature Elimination, Mean Absolute Deviation, and Dispersion Ratio, were combined to identify the most relevant features of GeNIS and reduce its dimensionality, enabling a more computationally efficient detection. Three decision tree ensembles and two deep neural networks were trained for both binary and multiclass classification tasks. All models reached high accuracy and F1-scores, and the ML ensembles achieved slightly better generalization while remaining more efficient than DL models. Overall, the obtained results indicate that the GeNIS dataset supports intelligent intrusion detection and cyberattack classification with time-based and quantity-based behavioral features.
title Binary and Multiclass Cyberattack Classification on GeNIS Dataset
topic Cryptography and Security
Artificial Intelligence
url https://arxiv.org/abs/2511.08660