Skip to content

The classifier judged this item not relevant to AI security, so it is left out of lists, feeds, the API and dataset releases. If that is wrong, report a correction on this page.

InfoResearchPeer-reviewed

Intrusion Detection System for Open Network Scenarios: A Known/Unknown Attack Detection Method Based on Inter-Class Relationships

Published
Record updated

Summary

This paper proposes a known/unknown attack detection method for intrusion detection systems that uses inter-class relationships, with a virtual class inserted near known attack categories and soft-label prototypes compared to predictions via Kullback-Leibler divergence. A Gaussian Mixture Model models the divergence distribution to identify unknown attacks. On NSL-KDD, the method improves the harmonic mean of known and unknown class detection accuracy by over 7% relative to state-of-the-art methods, and it raises unknown attack detection accuracy by about 1.12% on CICIDS2017 and 5.24% on NSL-KDD.