Predicting DoS and DDoS attacks in network security scenarios using a hybrid deep learning model

• Published in: Journal of intelligent systems 2024-04, Vol.33 (1), p.619-38
• Main Authors: Al-zubidi, Azhar F., Farhan, Alaa Kadhim, Towfek, Sayed M.
• Format: Article
• Language: English
• Subjects: Accuracy; Algorithms; Classification; CNN-LSTM-XGBoost model; Correlation analysis; correlation-based feature selection; cyberattack classification; cyberattack prediction; Cybersecurity; Deep learning; Denial of service attacks; Feature selection; Hybrid control systems; Intelligent systems; Machine learning; Network security
• ISSN: 2191-026X; 0334-1860; 2191-026X
• DOI: 10.1515/jisys-2023-0195

Network security faces increasing threats from denial of service (DoS) and distributed denial of service (DDoS) attacks. The current solutions have not been able to predict and mitigate these threats with enough accuracy. A novel and effective solution for predicting DoS and DDoS attacks in network security scenarios is presented in this work by employing an effective model, called CNN-LSTM-XGBoost, which is an innovative hybrid approach designed for intrusion detection in network security. The system is applied and analyzed to three datasets: CICIDS-001, CIC-IDS2017, and CIC-IDS2018. We preprocess the data by removing null and duplicate data, handling imbalanced data, and selecting the most relevant features using correlation-based feature selection. The system is evaluated using accuracy, precision, 1 score, and recall. The system achieves a higher accuracy of 98.3% for CICIDS-001, 99.2% for CICIDS2017, and 99.3% for CIC-ID2018, compared to other existing algorithms. The system also reduces the overfitting of the model using the most important features. This study shows that the proposed system is an effective and efficient solution for network attack detection and classification.