Cybersecurity Intrusion Detection with Image Classification Model Using Hilbert Curve
Issued Date
2024-01-01
Resource Type
ISSN
21845921
eISSN
21844321
Scopus ID
2-s2.0-85192137727
Journal Title
Proceedings of the International Joint Conference on Computer Vision, Imaging and Computer Graphics Theory and Applications
Volume
2
Start Page
325
End Page
332
Rights Holder(s)
SCOPUS
Bibliographic Citation
Proceedings of the International Joint Conference on Computer Vision, Imaging and Computer Graphics Theory and Applications Vol.2 (2024) , 325-332
Suggested Citation
Jaroensiripong P., Sumongkayothin K., Siritanawan P., Kotani K. Cybersecurity Intrusion Detection with Image Classification Model Using Hilbert Curve. Proceedings of the International Joint Conference on Computer Vision, Imaging and Computer Graphics Theory and Applications Vol.2 (2024) , 325-332. 332. doi:10.5220/0012306100003660 Retrieved from: https://repository.li.mahidol.ac.th/handle/20.500.14594/98309
Title
Cybersecurity Intrusion Detection with Image Classification Model Using Hilbert Curve
Author's Affiliation
Corresponding Author(s)
Other Contributor(s)
Abstract
Cybersecurity intrusion detection is crucial for protecting an online system from cyber-attacks. Traditional monitoring methods used in the Security Operation Center (SOC) are insufficient to handle the vast volume of traffic data, producing an overwhelming number of false alarms, and eventually resulting in the neglect of intrusion incidents. The recent integration of Machine Learning (ML) and Deep Learning (DL) into SOC monitoring systems has enhanced the intrusion detection capabilities by learning the patterns of network traffic data. Despite many ML methods implemented for intrusion detection, the Convolutional Neural Network (CNN), one of the most high-performing ML algorithms, has not been widely adopted for the intrusion detection systems. This research aims to explore the potentials of CNN implementation with the network data flows. Since the CNN was originally designed for image processing applications, it is necessary to convert the 1-dimensional network data flows into 2-dimensional image data. This research presents a novel approach to convert the network data flow into an image (flow-to-image) by the Hilbert curve mapping algorithm which can preserve the locality of the data. Then, we apply the converted images to the CNN-based intrusion detection system. Eventually, the proposed method and model can outperform the recent methods with 92.43% accuracy and 93.05% F1-score on the CIC-IDS2017 dataset, and 81.78% accuracy and 83.46% F1-score on the NSL-KDD dataset. In addition to the classification capability, the flow-to-image mapping algorithm can also visualize the characteristics of the network attack on the images visually, which can be an alternative monitoring approach for SOC.