Bài báo quốc tế
A novel ensemble learning-based model for APT attack detection
Vũ Thành Đức
Improving the effectiveness of APT attack detection models is one of the most critical and essential tasks today. Following this trend, this paper proposes a new model called ACDF-mLSTM to address two primary challenges currently faced by research in this field: (i) data imbalance and (ii) information aggregation and feature extraction. Specifically, to solve the data imbalance problem, the paper proposes a novel data generation method named ACDF. This method leverages advanced and sophisticated techniques to focus on identifying crucial points in sequential data and analyzing context by considering preceding and succeeding data points. Subsequently, a Diffusion Model is applied to generate synthetic APT attack data, built upon the principle of gradual diffusion. With this approach, the ACDF model can generate more meaningful and realistic data. Next, to address the task of information aggregation and feature extraction, the paper proposes a new deep learning model named mLSTM, based on the optimization of Long Short-Term Memory (LSTM). Thus, the mLSTM model performs two main tasks: (i) extracting information from network flows within traffic and (ii) aggregating and highlighting important information before it enters the classification model. In the experimental section, the paper evaluates the ACDF-mLSTM model for the first time across various scenarios and datasets to demonstrate its effectiveness and adaptability. The evaluation results show that the ACDF-mLSTM model outperformed most other methods by an average of 2 to 12% across all metrics and on all experimental datasets.
Xuất bản trên:
A novel ensemble learning-based model for APT attack detection
Ngày đăng:
2025
Nhà xuất bản:
Memetic Computing
Địa điểm:
Từ khoá:
Adaptive contextual (AC), Selective adversarial generation (SAG), BiLSTM (Bidirectional long short-term memory), and Transformer
Bài báo liên quan
Teaching C++ with pleasure in Multimedia by developing a virtual park learning environment
Lê Minh HóaEfficient real-time and parallel algorithm for connected orthogonal convex hulls on large point sets
Nguyễn Kiều LinhEffective Multi-Stage Training Model For Edge Computing Devices In Intrusion Detection
Huỳnh Trọng Thưa