Learning to Detect: An Enhanced DNN Model with Adaptive Attention for Classifying DDoS Traffic
Downloads
This research proposes an enhanced Deep Neural Network (DNN) model for detecting Distributed Denial of Service (DDoS) attacks using the CIC-IDS2017 dataset. The model incorporates a Adaptive Attention Layer (AAL) and data normalization to improve feature relevance and classification accuracy. Experiments were conducted across three feature sets (78, 39, and 25), multiple dataset sizes (4K, 40K, 225K), and a range of classification thresholds (0.1 to 1.0). Results demonstrate that optimal accuracy is consistently achieved at thresholds between 0.2 and 0.4. The study confirms a positive correlation between increased feature and dataset sizes and improved detection accuracy—especially when combined with AAL and normalization. The adaptive layer significantly enhances model performance by focusing on the most informative features and reducing both false positives and false negatives. The proposed model achieved a maximum accuracy of 99.93%, outperforming several benchmark methods. These findings underscore the value of attention-based deep learning approaches in developing robust, scalable, and real-time intrusion detection systems for cybersecurity applications.
Ajala, O. A., Okoye, C. C., Ofodile, O. C., Arinze, C. A., & Daraojimba, O. D. (2024). Review of AI and machine learning applications to predict and Thwart cyber-attacks in real-time. Magna Scientia Advanced Research and Reviews, 10(1), 312-320.
BANDARUPALLI, G. (2024). Efficient Deep Neural Network for Intrusion Detection Using CIC-IDS-2017 Dataset.
Boukhamla A. K., Coronel J. (2021). CICIDS2017 Dataset: Performance Improvements and Validation as a Robust Intrusion Detection System Testbed. International Journal of Information and Computer Security 16(1/2):20 – 32, August 2021. DOI: 10.1504/IJICS.2021.10039325
Halimaa, A., & Sundarakantham, K. (2019). Machine learning-based intrusion detection system. Paper presented at the 2019 3rd International Conference on Trends in Electronics and Informatics (ICOEI).
Jose, J., & Jose, D. V. (2023). Deep learning algorithms for intrusion detection systems in the Internet of Things using CIC-IDS 2017 dataset. International Journal of Electrical and Computer Engineering (IJECE), 13(1), 1134-1141.
Montesinos López, O. A., Montesinos López, A., & Crossa, J. (2022). Multivariate statistical machine learning methods for genomic prediction: Springer Nature.
Mughal, A. A. (2020). Cyber Attacks on OSI Layers: Understanding the Threat Landscape. Journal of Humanities & Applied Science Research, 3(1), 1-18.
Obaid, H. S., & Abeed, E. H. (2020). DoS and DDoS attacks at OSI layers. International Journal of Multidisciplinary Research & Pubs, 2(8), 1-9.
Panigrahi R. and Borah S. (2018). A detailed analysis of CICIDS2017 dataset for designing Intrusion Detection Systems. Int. J. Eng. Technol., vol. 7, no. 24, pp. 479_482.
Peng et al. (2018) . An improved feature selection algorithm based on ant colony optimization. IEEE Access, vol. 6, pp. 69203_69209.
Popoola E. and Adewumi A (2017). Efficient feature selection technique for network intrusion detection system using discrete differential evolution and decision tree. Int. J. Netw. Secur., vol. 19, no. 5, pp. 660_669.
Sajid, M., Malik, K. R., Almogren, A., Malik, T. S., Khan, A. H., Tanveer, J., & Rehman, A. U. (2024). Enhancing intrusion detection: a hybrid machine and deep learning approach. Journal of Cloud Computing, 13(1), 123.
Sharifani, K., & Amini, M. (2023). Machine learning and deep learning: A review of methods and applications. World Information Technology and Engineering Journal, 10(07), 3897-3904.
Singh et al. (2019). Optimization of FAR in intrusion detection system by using random forest algorithm,'' SSRN Electron. J., vol. 5, pp. 3_6, Mar. 2019.
Siyyal, S. A., Khuawar, F. Y., Saba, E., Memon, A. L., & Shaikh, M. R. (2022). Analyzing ml-based IDs over real traffic. International Journal of Innovations in Science & Technology, 4(3), 621-640.
Stiawan, D., Idris, M. Y. B., Bamhdi, A. M., & Budiarto, R. (2020). CICIDS-2017 dataset feature analysis with information gain for anomaly detection. IEEE Access, 8, 132911-132921.
Swarnkar, V. K., Ambhaikar, A., & Swarnkar, S. K. (2021). Big Data Security Enhancement Based Intrusion Detection System Using K-Mean Clustering of Decomposited Features. INFORMATION TECHNOLOGY IN INDUSTRY, 9(1), 387-394.
Yulianto, A., Sukarno, P., & Suwastika, N. A. (2019). Improving adaboost-based intrusion detection system (IDS) performance on CIC IDS 2017 dataset. Paper presented at the Journal of Physics: Conference Series.
