The adaptive firewall with log predictive analysis based on neural network

Cover Page

Cite item

Full Text

Open Access Open Access
Restricted Access Access granted
Restricted Access Subscription or Fee Access

Abstract

The article considers the development of an adaptive IDS/IPS system based on neural networks, capable of detecting both known and previously unknown attacks. The analysis is conducted using the NF-ToN-IoT dataset. Three neural networks were trained: for attack detection, attack type identification, and unknown threat prediction. The results demonstrate high attack detection accuracy (96.97 %) and the ability to identify new threats (81.94 %), surpassing existing solutions.The developed firewall and intrusion prevention system demonstrates high efficiency, enabling the creation of a domestic security system capable of minimizing the risk of hacker attacks and ensuring reliable protection of network infrastructure.

Full Text

Restricted Access

About the authors

D. A. Kuznetsov

Russian Technological University — MIREA

Author for correspondence.
Email: daniil.kuznetsov2001@mail.ru

Master’s Degree Student

Russian Federation, Moscow

M. L. Rysin

Russian Technological University — MIREA

Email: rysin@mirea.ru

Cand. of Pedagog. Sc.

Russian Federation, Moscow

References

  1. Kochergin S. V., Artemova S. V., Bakaev A. A., Mityakov E. S., Vegera Zh. G., Maksimova E. A. Cybersecurity of smart grids: Comparison of machine learning approaches for anomaly detection, Russian technological journal, 2024, pp. 7—9 (in Russian).
  2. Ryapolova E. I., Tsvetkova K. E. Analysis of anomaly detection systems and hybrid intrusion detection systems, Problems and Prospects of Implementing Innovative Telecommunication Technologies, 2020, pp. 130—142 (in Russian).
  3. Yugai P. E., Moskvin D. A. Use of machine learning algorithms and honeypot systems for detecting adversarial attacks on intrusion detection systems, Problems of Information Security. Computer Systems, 2023, pp. 145—155 (in Russian).
  4. Ivkin А. N. Training and implementation of an adaptive system in an intrusion detection system, Current Problems of Radio Electronics and Telecommunications, 2021, pp. 172—174 (in Russian).
  5. Moskvichev А. D. The Intrusion Detection System Based on Immune System and Neural Network Detectors, Colloquium-journal, 2024, pp. 84—85 (in Russian).
  6. Glushenko M. V., Shirjaev A. A., Glushenko S. A. IDS / IPS — Intrusion Detection and Prevention Systems, Koncepcija obshhestv aznanij v sovremennoj nauke, 2019, pp. 115—117 (in Russian).
  7. Bazarova I. A. Mathematical modelling means in problems of rectangular covering of random polygon areas, Upravlenie ustojchivym razvitiem toplivno-jenergeticheskoho kompleksa, 2021, pp. 95—99 (in Russian).
  8. Moustafa N., Slay J. The evaluation of network anomaly detection systems: Statistical analysis of the UNSW-NB15 dataset and the comparison with the KDD99 dataset, Information Security Journal: А Global Perspective, 2016, vol. 25, no. 1—3, pp. 18—31.
  9. Doshi R., Apthorpe N., Feamster N. Machine Learning DDoS Detection for Consumer Internet of Things Devices, IEEE Symposium on Security and Privacy Workshops, 2018, pp. 29—35.
  10. Kim G., Lee S., Kim S. А novel hybrid intrusion detection method integrating anomaly detection with misuse detection, Expert Systems with Applications. 2014, vol. 41, no. 4, pp. 1690—1700.
  11. Sarhan M., Layeghy S., Portmann M. Feature Analysis for Machine Learning-based IOT Intrusion Detection, Digital Communications and Networks, 2024, vol. 10, iss. 1, pp. 205—216.

Supplementary files

Supplementary Files
Action
1. JATS XML
2. Fig. 1. Number of entries in the NF-ToN-IOT dataset.csv

Download (151KB)
3. Fig. 2. The number of records by traffic type in the dataset

Download (133KB)
4. Fig. 3. Average values for the Benign and Attack clusters

Download (218KB)
5. Fig. 4. Visualization of the average values of the Benign and Attack clusters

Download (143KB)
6. Fig. 5. The result of the neural network operation

Download (481KB)
7. Fig. 6. The result of neural network training

Download (424KB)
8. Fig. 7. The neural network learning process

Download (351KB)
9. Figure 8. The result of determining the type of traffic

Download (115KB)
10. Fig. 9. The result of automatic rule addition

Download (114KB)
11. Fig. 10. The result of automatic attack recognition

Download (186KB)

Copyright (c) 2026 Informacionnye Tehnologii



СМИ зарегистрировано Федеральной службой по надзору в сфере связи, информационных технологий и массовых коммуникаций (Роскомнадзор).
Регистрационный номер и дата принятия решения о регистрации СМИ: серия ПИ № 77 - 15565 от 02 июня 2003 г.