Show simple item record

AuthorBenaddi, Hafsa
AuthorIbrahimi, Khalil
AuthorBenslimane, Abderrahim
AuthorJouhari, Mohammed
AuthorQadir, Junaid
Available date2023-07-13T05:40:52Z
Publication Date2022
Publication NameIEEE Transactions on Vehicular Technology
ResourceScopus
ISSN189545
URIhttp://dx.doi.org/10.1109/TVT.2022.3186834
URIhttp://hdl.handle.net/10576/45578
AbstractThe incorporation of advanced networking technologies makes modern systems vulnerable to cyber-attacks that can result in a number of harmful outcomes. Due to the increase of security incidents and massive activities on networks, existing works have mainly focused on designing Intrusion Detection Systems (IDSs) based on traditional machine learning and deep learning models. In recent times, state of the art performance has been achieved in various fields through Deep Reinforcement Learning (DRL), which combines deep learning with reinforcement learning. In this paper, we propose a new DRL-based IDS for network traffics using Markov decision process (MDP) to improve the IDS decision-making performance. In addition, an extensive analysis of the IDS behavior is provided through modeling the interaction between the well-behaving IDS and attacker players using Stochastic Game Theory. Specifically, we used a non-zero-sum stochastic game, where the transitions between states depend on both the IDS and the attacker's actions at each stage of the game. We show that our game reaches a Nash Equilibrium upon convergence to seek the optimal solution, which corresponds to the optimal decision policy where both players maximize their profits. We compared the performance of our proposed DRL-IDS to the baseline benchmark of standard reinforcement learning (RL) and several machine learning algorithms using NSL-KDD dataset. As a result, our proposed DRL-IDS outperforms the existing models by improving both the detection rate and the accuracy while reducing false alarms. Results were provided to demonstrate the convergence of the game theory-based IDS under various settings toward equilibrium. This equilibrium corresponds to the safe state where both players are playing their respective best strategies. 1967-2012 IEEE.
Languageen
PublisherInstitute of Electrical and Electronics Engineers Inc.
SubjectDeep Reinforcement Learning
Intrusion Detection System
Network traffic
NSL-KDD
Performance Evaluation
Q-learning
Security
Stochastic Game
TitleRobust Enhancement of Intrusion Detection Systems Using Deep Reinforcement Learning and Stochastic Game
TypeArticle
Pagination11089-11102
Issue Number10
Volume Number71
dc.accessType Abstract Only


Files in this item

FilesSizeFormatView

There are no files associated with this item.

This item appears in the following Collection(s)

Show simple item record