A Comparison of Header and Deep Packet Features when Detecting Network Intrusions

Loading...
Thumbnail Image

Files

CS-TR-5059.pdf (893.8 KB)
No. of downloads: 821

Publication or External Link

Date

2018-07-07

Advisor

Citation

Abstract

A classical multilayer perceptron algorithm and novel convolutional neural network payload classifying algorithm are presented for use on a realistic network intrusion detection dataset. The payload classifying algorithm is judged to be inferior to the multilayer perceptron but shows significance in being able to distinguish between network intrusions and benign traffic. The multilayer perceptron that is trained on less than 1% of the available classification data is judged to be a good modern estimate of usage in the real-world when compared to prior research. It boasts an average true positive rate of 94.5% and an average false positive rate of 4.68%.

Notes

Rights