Abstract
Modern intrusion detection systems utilize machine learning to identify network anomalies. Traditional static rules may not be sufficient to combat emerging attacks, making it critical to adopt a dynamic approach for keeping intrusion detection rules up-to-date. This study introduces an intelligent rule generator with a packet encoding method to represent packets into images, a vision model to encode the images, and a video captioning model, mapping image features to textual descriptions, thereby generating rules suitable for network intrusion detection systems. The results of our simulated data experiments show that our classification model has a higher accuracy than others and is capable of generating rules.
This research is supported by the project of National Science and Technology Council, Taiwan, R.O.C under project no. NSTC 112-2218-E-006-012.
This is a preview of subscription content, log in via an institution to check access.
Access this chapter
Tax calculation will be finalised at checkout
Purchases are for personal use only
References
Vollmer, T., et al.: Autonomous rule creation for intrusion detection. Proc. IEEE Symposium on Computational Intelligence in Cyber Security (CICS) 2011, 1–8 (2011)
Fallahi, N., et al.: Automated flow-based rule generation for network intrusion detection systems. In: Proc. 2016 24th Iranian Conference on Electrical Engineering (ICEE), pp. 1948–1953 (2016)
Sagala, A.: Automatic SNORT IDS rule generation based on honeypot log. In: Proc. 2015 7th International Conference on Information Technology and Electrical Engineering (ICITEE), pp. 576–580 (2015)
Laryea, E.N.A.: Snort Rule Generation for Malware Detection using the GPT2 Transformer. Université d'Ottawa/University of Ottawa (2022)
Sharafaldin, I., et al.: Toward Generating a New Intrusion Detection Dataset and Intrusion Traffic Characterization (2018)
Li, R., et al.: Byte Segment Neural Network for Network Traffic Classification. In: Proc. 2018 IEEE/ACM 26th International Symposium on Quality of Service (IWQoS), pp. 1–10 (2018)
Verkerken, M., et al.: A novel multi-stage approach for hierarchical intrusion detection. IEEE Trans. Netw. Serv. Manage. 20(3), 3915–3929 (2023). https://doi.org/10.1109/tnsm.2023.3259474
Potluri, S., et al.: Convolutional Neural Networks for Multi-class Intrusion Detection System, pp. 225–238. Springer International Publishing (2018)
Lim, H.-K., et al.: Packet-based network traffic classification using deep learning. In: Proc. 2019 International Conference on Artificial Intelligence in Information and Communication (ICAIIC), IEEE, pp. 046–051 (2019)
Millar, K., et al.: Using convolutional neural networks for classifying malicious network traffic. In: Alazab, M., Tang, M. (eds.) Deep Learning Applications for Cyber Security, pp. 103–126. Springer International Publishing (2019)
Tran, D., et al.: Learning Spatiotemporal Features with 3D Convolutional Networks. Proc. IEEE International Conference on Computer Vision (ICCV) 2015, 4489–4497 (2015)
Tran, D., et al.: A closer look at spatiotemporal convolutions for action recognition. Proc. IEEE/CVF Conference on Computer Vision and Pattern Recognition 2018, 6450–6459 (2018)
Sak, H., et al.: Long short-term memory recurrent neural network architectures for large scale acoustic modeling (2014)
Pasunuru, R., Bansal, M.: Multi-task video captioning with video and entailment generation. arXiv preprint arXiv:1704.07489 (2017). https://doi.org/10.48550/arXiv.1704.07489
Wang, B., et al.: Reconstruction Network for Video Captioning. Proc. IEEE/CVF Conference on Computer Vision and Pattern Recognition 2018, 7622–7631 (2018)
Pei, W., et al.: Memory-Attended Recurrent Network for Video Captioning. Proc. IEEE/CVF Conference on Computer Vision and Pattern Recognition (CVPR) 2019, 8339–8348 (2019)
Cheng, A.: PAC-GAN: Packet Generation of Network Traffic using Generative Adversarial Networks. In: Proc. 2019 IEEE 10th Annual Information Technology, Electronics and Mobile Communication Conference (IEMCON), pp. 0728-0734 (2019)
Radford, A., et al.: Learning transferable visual models from natural language supervision. In: Proc. International conference on machine learning, pp. 8748–8763. PMLR (2021)
Moustafa, N., Slay, J.: UNSW-NB15: a comprehensive data set for network intrusion detection systems (UNSW-NB15 network data set). Proc. Military Communications and Information Systems Conference (MilCIS) 2015, 1–6 (2015)
Tavallaee, M., et al.: A detailed analysis of the KDD CUP 99 data set. Proc. IEEE Symposium on Computational Intelligence for Security and Defense Applications 2009, 1–6 (2009)
Kingma, D.P., Ba, J.: Adam: A method for stochastic optimization. arXiv preprint arXiv:1412.6980 (2014). https://doi.org/10.48550/arXiv.1412.6980
Author information
Authors and Affiliations
Corresponding author
Editor information
Editors and Affiliations
Rights and permissions
Copyright information
© 2024 ICST Institute for Computer Sciences, Social Informatics and Telecommunications Engineering
About this paper
Cite this paper
Cheng, ST., Cheng, YL., Cheung, KC. (2024). Rule Generation for Network Intrusion Detection Systems Based on Packets-To-Video Transformation. In: Deng, DJ., Chen, JC. (eds) Smart Grid and Internet of Things. SGIoT 2023. Lecture Notes of the Institute for Computer Sciences, Social Informatics and Telecommunications Engineering, vol 557. Springer, Cham. https://doi.org/10.1007/978-3-031-55976-1_6
Download citation
DOI: https://doi.org/10.1007/978-3-031-55976-1_6
Published:
Publisher Name: Springer, Cham
Print ISBN: 978-3-031-55975-4
Online ISBN: 978-3-031-55976-1
eBook Packages: Computer ScienceComputer Science (R0)