Automated Detection Of Network Intrusions Using Machine Learning in Real-Time Systems

Abstract

The rapid growth of digital technologies has significantly increased the complexity and frequency of cyber threats, making network security a critical concern in modern information systems. Traditional security approaches, such as rule-based and signature-based systems, are often limited in detecting sophisticated and unknown attacks. Therefore, this study proposes an Anomaly-Based Intrusion Detection System (AbIDS) utilizing machine learning and deep learning techniques to enhance detection capabilities. The research adopts a Design Science Research approach, involving stages of problem identification, data collection, preprocessing, model development, system implementation, and evaluation. Several models, including Decision Tree (DT), Support Vector Machine (SVM), Convolutional Neural Network (CNN), and Long Short-Term Memory (LSTM), are implemented and compared. The results indicate that deep learning models, particularly LSTM and CNN, outperform traditional machine learning methods in terms of accuracy, precision, recall, and F1-score, while maintaining a lower false positive rate. Additionally, the integration of incremental learning enables the system to adapt to new attack patterns without requiring complete retraining, improving scalability and real-time performance. Despite the promising results, challenges such as computational complexity and false positives remain. Overall, the proposed IDS model demonstrates strong potential as an effective and adaptive solution for enhancing network security in dynamic environments.