Cyber-attacks are becoming increasingly sophisticated, prompting more interest in Anomaly-based Intrusion Detection Systems for their ability to detect zero-day threats. As networks expand, outsourcing detection services to third parties raises concerns about data security demanding a need for privacy preservation techniques. Homomorphic Encryption (HE) offers a solution, enabling privacy-preserving anomaly detection by allowing computations without compromising privacy. Our work focuses on developing Private classifiers using Cheon-Kim-Kim-Song (CKKS) scheme of HE for intrusion detection. Experiments on the CICIDS2017 dataset using five Machine Learning (ML) classifiers reveal that private Deep Learning (DL) methods achieve performance levels comparable to traditional classifiers. Among these, the Convolutional Neural Network (CNN) strikes a balance between classification speed and detection performance, making it the preferred choice for privacy-preserving intrusion detection.

错误:搜索内容不能为空,请输入英文关键词
错误:关键词超出字数限制,请精简
高级检索

Privacy-Preserving Machine Learning Inference for Intrusion Detection

  • Manigandan Ramadasan,
  • Omar Tahmi,
  • Hakima Ould-Slimane,
  • Chamseddine Talhi,
  • G. Suganya

摘要

Cyber-attacks are becoming increasingly sophisticated, prompting more interest in Anomaly-based Intrusion Detection Systems for their ability to detect zero-day threats. As networks expand, outsourcing detection services to third parties raises concerns about data security demanding a need for privacy preservation techniques. Homomorphic Encryption (HE) offers a solution, enabling privacy-preserving anomaly detection by allowing computations without compromising privacy. Our work focuses on developing Private classifiers using Cheon-Kim-Kim-Song (CKKS) scheme of HE for intrusion detection. Experiments on the CICIDS2017 dataset using five Machine Learning (ML) classifiers reveal that private Deep Learning (DL) methods achieve performance levels comparable to traditional classifiers. Among these, the Convolutional Neural Network (CNN) strikes a balance between classification speed and detection performance, making it the preferred choice for privacy-preserving intrusion detection.