{"about":{"site":"https://codewithpapers.app","non_affiliation":"Code with Papers and Syntology are not affiliated with, endorsed by, or sponsored by Papers with Code, Meta, or the pwc-archive mirror.","licence":"CC BY-SA 4.0","licence_url":"https://creativecommons.org/licenses/by-sa/4.0/legalcode","attribution":"https://codewithpapers.app/attribution","modified":"archive material modified by Syntology; see the attribution page"},"url":"/paper/an-intrusion-detection-system-based-on-deep","title":"An Intrusion Detection System based on Deep Belief Networks","arxiv_id":"2207.02117","date":"2022-07-05","proceeding":null,"authors":["Othmane Belarbi","Aftab Khan","Pietro Carnelli","Theodoros Spyridopoulos"],"abstract":"The rapid growth of connected devices has led to the proliferation of novel cyber-security threats known as zero-day attacks. Traditional behaviour-based IDS rely on DNN to detect these attacks. The quality of the dataset used to train the DNN plays a critical role in the detection performance, with underrepresented samples causing poor performances. In this paper, we develop and evaluate the performance of DBN on detecting cyber-attacks within a network of connected devices. The CICIDS2017 dataset was used to train and evaluate the performance of our proposed DBN approach. Several class balancing techniques were applied and evaluated. Lastly, we compare our approach against a conventional MLP model and the existing state-of-the-art. Our proposed DBN approach shows competitive and promising results, with significant performance improvement on the detection of attacks underrepresented in the training dataset.","url_abs":"https://arxiv.org/abs/2207.02117v1","url_pdf":"https://arxiv.org/pdf/2207.02117v1.pdf","source":{"archive":"pwc-archive (Hugging Face), CC BY-SA 4.0","snapshot":"2025-07-28","licence_url":"https://creativecommons.org/licenses/by-sa/4.0/legalcode","row_kind":"abstracts"},"code_links":[{"paper_slug":"an-intrusion-detection-system-based-on-deep","repo_url":"https://github.com/othmbela/dbn-based-nids","is_official":1,"mentioned_in_paper":1,"mentioned_in_github":1,"framework":"pytorch","reach":null}],"tasks":[{"task_slug":"intrusion-detection","task_name":"Intrusion Detection"},{"task_slug":"network-intrusion-detection","task_name":"Network Intrusion Detection"}],"methods":[],"datasets_introduced":[],"methods_introduced":[],"results":[{"leaderboard":"/sota/network-intrusion-detection-on-cicids2017","task":"Network Intrusion Detection","dataset":"CICIDS2017","model":"DBN","rank_in_archive_order":3,"of":5,"metrics":{"Avg F1":"0.94","Precision":"88.7","Recall":"99.7"},"uses_additional_data":false},{"leaderboard":"/sota/network-intrusion-detection-on-cicids2017","task":"Network Intrusion Detection","dataset":"CICIDS2017","model":"MLP","rank_in_archive_order":5,"of":5,"metrics":{"Avg F1":"0.873","Precision":"81.7","Recall":"99.5"},"uses_additional_data":false}],"syntology":{"syntology_url":null,"atlas_url":null,"mcp":null,"developers":"https://syntology.ai/developers"},"arxiv_metadata":null,"syntology_extracted_results":null}