marzekan / anomaly_based_ids

A proof-of-concept for an Anomaly-based Intrusion Detection System based on a neural network.

Anomaly-based Intrusion Detection System

This project was made for Information Systems Security class. Goal was to use neural network classifier for predicting network and web attacks.

This project is more of a proof-of-concept for the usage of FFBP neural network classifiers in IDSs, then a final working product.

Dataset we used to achieve this goal is CICIDS2017 dataset made by Canadian Institute for Cybersecurity, University of New Brunswick. Dataset contains network traffic data during normal traffic and during execution of different attacks.

Built with

Project was made with standard Python ML tools such as: pandas, sklearn, tensorflow 2.0 and keras.

Pipeline

Main part of ML pipeline is the neural network classifier built with tensorflow 2.0..

anomaly_based_ids's Issues

drop_duplicates(keep=False)

Doing that, you'll delete all entry? Shouldn't you keep just one? Something like drop_duplicates(keep='first').