I-SiamIDS: an improved Siam-IDS for handling class imbalance in network-based intrusion detection systems
Punam Bedi, Neha Gupta, Vinita Jindal

TL;DR
This paper introduces I-SiamIDS, an algorithm-level ensemble method that effectively handles class imbalance in network intrusion detection systems without data-level balancing, improving detection accuracy and robustness.
Contribution
The paper proposes a novel two-layer ensemble approach, I-SiamIDS, that addresses class imbalance at the algorithm level, outperforming existing data balancing techniques.
Findings
Significant improvements in Accuracy, Recall, Precision, F1-score, and AUC on NSL-KDD and CIDDS-001 datasets.
Effective detection of both majority and minority attack classes without data-level balancing.
Acceptable computational cost for practical deployment.
Abstract
NIDSs identify malicious activities by analyzing network traffic. NIDSs are trained with the samples of benign and intrusive network traffic. Training samples belong to either majority or minority classes depending upon the number of available instances. Majority classes consist of abundant samples for the normal traffic as well as for recurrent intrusions. Whereas, minority classes include fewer samples for unknown events or infrequent intrusions. NIDSs trained on such imbalanced data tend to give biased predictions against minority attack classes, causing undetected or misclassified intrusions. Past research works handled this class imbalance problem using data-level approaches that either increase minority class samples or decrease majority class samples in the training data set. Although these data-level balancing approaches indirectly improve the performance of NIDSs, they do not…
Peer Reviews
No public reviews on file for this paper yet. If you reviewed it on a platform where reviews are public (OpenReview, ICLR, NeurIPS, ICML), you can paste yours below so the community can read it here.
Videos
No videos yet. Explain this paper in a talk, walkthrough, or lecture? Add one.
