SGAN-RL: Fusion classification method for network intrusion detection based on data augmentation

Abstract

 Although traditional research methods for intrusion detection can effectively prevent and mitigate issues such as data leaks to avoid severe consequences, existing intrusion detection technologies encounter limitations, including low classification accuracy and high false positive rates, particularly when dealing with high-dimensional, complex network anomaly traffic data. Additionally, the common problem of class imbalance in intrusion detection datasets exacerbates these challenges. This paper introduces a novel approach to network intrusion detection classification, termed SGAN-RL, which integrates ResNet and LSTM models based on the semi-supervised generative adversarial network (SGAN) framework. This method utilizes SGAN to generate synthetic data resembling real intrusion detection data and continually trains the discriminator to produce high-quality data, thereby enhancing data distribution balance and quality. Moreover, a fusion intrusion detection classification model is presented, leveraging the strengths of ResNet and LSTM architectures to capture spatial and temporal features, respectively. This synergistic fusion enhances the model’s capacity for comprehensive data representation, resulting in improved performance in intrusion detection data classification tasks. Experiments conducted on intrusion detection datasets NSL-KDD, UNSW-NB15, and CIC-IDS2017 demonstrate that the proposed model enhances accuracy, precision, recall, F1-score, ROC-AUC, PR-AUC, respectively, showcasing its robust performance and reliability in network intrusion detection classification.