In this article, the application of the deep learning method based on Gaussian–Bernoulli type restricted Boltzmann machine (RBM) to the detection of denial of service (DoS) attacks is considered. To increase the DoS attack detection accuracy, seven additional layers are added between the visible and the hidden layers of the RBM. Accurate results in DoS attack detection are obtained by optimization of the hyperparameters of the proposed deep RBM model. The form of the RBM that allows application of the continuous data is used. In this type of RBM, the probability distribution of the visible layer is replaced by a Gaussian distribution. Comparative analysis of the accuracy of the proposed method with Bernoulli-Bernoulli RBM, Gaussian–Bernoulli RBM, deep belief network type deep learning methods on DoS attack detection is provided. Detection accuracy of the methods is verified on the NSL-KDD data set. Higher accuracy from the proposed multilayer deep Gaussian–Bernoulli type RBM is obtained.
Get full access to this article
View all access options for this article.
References
1.
Mansfield-DevineS. DDoS goes mainstream: How headline-grabbing attacks could make this threat an organisation's biggest nightmare. Netw Secur. 2016; 11:7–13.
2.
NazarioJ. Politically motivated denial of service attacks. In: CzosseckC, GeersK, eds. The virtual battlefield perspectives on cyber warfare. Amsterdam: Ios Press, 2009, pp. 163–181.
Garcia-TeodoroP, Diaz-VerdejoJ, Macia-FernandezG, VazquezE. Anomaly-based network intrusion detection: Techniques, systems and challenges. Comput Secur. 2009; 28:18–28.
8.
AminantoME, KimK. Deep learning in intrusion detection system: An overview. In: Proceedings of the International Research Conference on Engineering and Technology, Jakarta, Indonesia, 2016, pp. 1–12. Available online at https://pdfs.semanticscholar.org/c0fa/578c1fae002e02834806a576d811002cb4a4.pdf (last accessed February20, 2018).
9.
WangZ. The applications of deep learning on traffic identification. Blackhat USA, 2015, pp. 1–10.
10.
NiyazQ, SunW, JavaidAY, AlamM. A Deep learning approach for network intrusion detection system. In: Proceedings of the 9th EAI International Conference on Bio-inspired Information and Communications Technologies (BICT), New York, 2016, pp. 21–26.
11.
ImamverdiyevYN, SukhostatLV. Network traffic anomalies detection based on informative features. Radio Electron Comput Sci Control. 2017; 3:113–120.
12.
DiroAA, ChilamkurtiN. Distributed attack detection scheme using deep learning approach for Internet of Things. Future Gener Comput Syst. 2018; 82:761–768.
13.
LiC, WuY, YuanX, et al.Detection and defense of DDoS attack–based on deep learning in OpenFlow‐based SDN. Int J Commun Syst. 2018:1–15.
14.
MirkovicJ, ReiherP. A taxonomy of DDoS attack and DDoS defense mechanisms. ACM SIGCOMM Comput Commun Rev., 2004; 34:39–53.
15.
PengT, LeckieC, RamamohanaraoK. Survey of network-based defense mechanisms countering the DoS and DDoS problems. ACM Comput Surv., 2007; 39:1–42.
16.
LoukasG, OkeG. Protection against denial of service attacks: A survey. Comput J., 2010; 53:1020–1037.
17.
BhuyanMH, KashyapHJ, BhattacharyyaDK, KalitaJK. Detecting distributed denial of service attacks: Methods, tools and future directions. Comput J., 2013; 57:537–556.
18.
TamaBA, RheeKH. Data mining techniques in DoS/DDoS attack detection: A literature review. In: Proceedings of the 3rd International Conference on Computer Applications and Information Processing Technology (CAIPT 2015), Yangon, Myanmar, 2015, pp. 1–4.
19.
GirmaA, GarubaM, GoelR. Advanced machine language approach to detect DDoS attack using DBSCAN clustering technology with entropy. In: LatifiS, ed. Information Technology - New Generations. Advances in Intelligent Systems and Computing, 2018, vol. 558. Cham, Switzerland: Springer, pp. 125–131.
20.
DengL. A tutorial survey of architectures, algorithms, and applications for deep learning, APSIPA. Trans Signal Inf Process. 2014; 3:1–29.
21.
VincentP, LarochelleH, LajoieI, et al.Stacked denoising autoencoders: Learning useful representations in a deep network with a local denoising criterion. J Mach Learn Res. 2010; 11:3371–3408.
22.
HochreiterS, SchmidhuberJ. Long short‐term memory. Neural Comput., 1997; 9::1735–1780.
23.
KrizhevskyA, SutskeverI, HintonGE. ImageNet classification with deep convolutional neural networks. Adv Neural Inf Process Syst., 2012; 25::1097–1105.
24.
DengL, YuD. Deep learning: Methods and applications. Found Trends Signal Process. 2014; 7:197–387.
25.
SalamaMA, EidHF, RamadanRA, et al.Hybrid Intelligent Intrusion Detection Scheme. In: Gaspar-CunhaA, TakahashiR, SchaeferG, CostaL, eds. Soft Computing in Industrial Applications. Advances in Intelligent and Soft Computing, 2011, vol. 96. Berlin, Heidelberg, Germany: Springer, pp. 293–303.
26.
LiY, MaR, JiaoR. A hybrid malicious code detection method based on Deep Learning. Int J Secur Appl. 2015; 9:205–216.
27.
MaT, WangF, ChengJ, et al.A hybrid spectral clustering and deep neural network ensemble algorithm for intrusion detection in sensor networks. Sensors. 2016; 16:1–23.
28.
GaoN, GaoL, GaoQ. An intrusion detection model based on deep belief networks. In: Proceedings of the Second International Conference on Advanced Cloud and Big Data (CBD), Huangshan, China, 2014; pp. 247–252.
29.
FioreU, PalmieriF, CastiglioneA, SantisAD. Network anomaly detection with the restricted Boltzmann machine. Neurocomputing. 2013; 122:13–23.
30.
TangTA, MhamdiL, McLernonD, et al.Deep Learning approach for network intrusion detection in software defined networking. In: Proceedings of the IEEE International Conference on Wireless Networks and Mobile Communications (WINCOM), Fez, Morocco, 2016, pp. 258–263.
31.
JungW, KimS, ChoiS. Poster: Deep learning for zero-day flash malware detection. In: Proceedings of the 36th IEEE Symposium on Security and Privacy, San Jose, California, 2015. Available online at https://www.ieee-security.org/TC/SP2015/program-posters.html (last accessed January10, 2018).
32.
YadavS, SubramanianS. Detection of application layer DDoS attack by feature learning using stacked autoencoder. In: Proceedings of the International Conference on Computational Techniques in Information and Communication Technologies (ICCTICT), New Delhi, India, 2016, pp. 361–366.
33.
ZolotukhinM, HämäläinenT, KokkonenT, SiltanenJ. Increasing web service availability by detecting application-layer DDoS attacks in encrypted traffic. In: Proceedings of the 23rd International Conference on Telecommunications (ICT), Thessaloniki, Greece, 2016, pp. 1–6; 2016.
34.
MemisevicR, HintonGE. Learning to represent spatial transformations with factored higher-order Boltzmann machines. Neural Comput. 2010; 22:1473–1492.
35.
LarochelleH, BengioY. Classification using discriminative restricted Boltzmann machines. In: Proceedings of the 25th ACM International Conference on Machine Learning, Helsinki, Finland, 2008, pp. 536–543.
36.
SaiedA, OverillRE, RadzikT. Artificial neural networks in the detection of known and unknown DDoS attacks: Proof-of concept. Commun Comput Inf Sci. 2014; 430:300–320.
37.
HintonGE, SalakhutdinovR. Reducing the dimensionality of data with neural networks. Science. 2006; 313:504–507.
38.
AlguliyevRM, AliguliyevRM, IsazadeNR. An unsupervised approach to generating generic summaries of documents. Appl Soft Comput. 2015; 34:236–250.
39.
AlgulievRM, AliguliyevRM, MehdiyevCA. pSum-SaDE: A modified p-median problem and selfadaptive differential evolution algorithm for text summarization. Appl Comp Intell Soft Comput. 2011; 2011:13.
40.
XiaoL, ShaoZ, LiuG. K-means algorithm based on Particle Swarm Optimization algorithm for anomaly intrusion detection. In: The sixth world congress on intelligent control and automation, Dalian, China, 2006, pp. 5854–5854.
Supplementary Material
Please find the following supplemental material available below.
For Open Access articles published under a Creative Commons License, all supplemental material carries the same license as the article it is associated with.
For non-Open Access articles published, all supplemental material carries a non-exclusive license, and permission requests for re-use of supplemental material or any part of supplemental material shall be sent directly to the copyright owner as specified in the copyright notice associated with the article.
