MAGE-ID: A Multimodal Generative Framework for Intrusion Detection Systems

Fuente: arXiv
Saved in:
Bibliographic Details
Main Authors: Loodaricheh, Mahdi Arab, Manshaei, Mohammad Hossein, Raja, Anita
Format: Preprint
Published: 2025
Subjects:
Online Access:
Tags: Add Tag
No Tags, Be the first to tag this record!
_version_ 1866915650952232960
author Loodaricheh, Mahdi Arab
Manshaei, Mohammad Hossein
Raja, Anita
author_facet Loodaricheh, Mahdi Arab
Manshaei, Mohammad Hossein
Raja, Anita
contents Modern Intrusion Detection Systems (IDS) face severe challenges due to heterogeneous network traffic, evolving cyber threats, and pronounced data imbalance between benign and attack flows. While generative models have shown promise in data augmentation, existing approaches are limited to single modalities and fail to capture cross-domain dependencies. This paper introduces MAGE-ID (Multimodal Attack Generator for Intrusion Detection), a diffusion-based generative framework that couples tabular flow features with their transformed images through a unified latent prior. By jointly training Transformer and CNN-based variational encoders with an EDM style denoiser, MAGE-ID achieves balanced and coherent multimodal synthesis. Evaluations on CIC-IDS-2017 and NSL-KDD demonstrate significant improvements in fidelity, diversity, and downstream detection performance over TabSyn and TabDDPM, highlighting the effectiveness of MAGE-ID for multimodal IDS augmentation.
format Preprint
id arxiv_https___arxiv_org_abs_2512_03375
institution arXiv
publishDate 2025
record_format arxiv
spellingShingle MAGE-ID: A Multimodal Generative Framework for Intrusion Detection Systems
Loodaricheh, Mahdi Arab
Manshaei, Mohammad Hossein
Raja, Anita
Machine Learning
Modern Intrusion Detection Systems (IDS) face severe challenges due to heterogeneous network traffic, evolving cyber threats, and pronounced data imbalance between benign and attack flows. While generative models have shown promise in data augmentation, existing approaches are limited to single modalities and fail to capture cross-domain dependencies. This paper introduces MAGE-ID (Multimodal Attack Generator for Intrusion Detection), a diffusion-based generative framework that couples tabular flow features with their transformed images through a unified latent prior. By jointly training Transformer and CNN-based variational encoders with an EDM style denoiser, MAGE-ID achieves balanced and coherent multimodal synthesis. Evaluations on CIC-IDS-2017 and NSL-KDD demonstrate significant improvements in fidelity, diversity, and downstream detection performance over TabSyn and TabDDPM, highlighting the effectiveness of MAGE-ID for multimodal IDS augmentation.
title MAGE-ID: A Multimodal Generative Framework for Intrusion Detection Systems
topic Machine Learning
url https://arxiv.org/abs/2512.03375