title: ÐÐ¾Ð²ÑÑÐµÐ½Ð¸Ðµ ÑÐµÐ·ÑÐ»ÑÑÐ°ÑÐ¸Ð²Ð½Ð¾ÑÑÐ¸ ÑÐ¸ÑÑÐµÐ¼ Ð¾Ð±Ð½Ð°ÑÑÐ¶ÐµÐ½Ð¸Ñ Ð²ÑÐ¾ÑÐ¶ÐµÐ½Ð¸Ð¹ Ñ Ð¿Ð¾Ð¼Ð¾ÑÑÑ Ð³ÐµÐ½ÐµÑÐ°ÑÐ¸Ð²Ð½Ð¾-ÑÐ¾ÑÑÑÐ·Ð°ÑÐµÐ»ÑÐ½Ð¾Ð¹ Ð½ÐµÐ¹ÑÐ¾ÑÐµÑÐ¸
title: Ð²ÑÐ¿ÑÑÐºÐ½Ð°Ñ ÐºÐ²Ð°Ð»Ð¸ÑÐ¸ÐºÐ°ÑÐ¸Ð¾Ð½Ð½Ð°Ñ ÑÐ°Ð±Ð¾ÑÐ° ÑÐ¿ÐµÑÐ¸Ð°Ð»Ð¸ÑÑÐ°
titleType: Subtitle
title: Efficiency improvement of intrusion detection systems with generative adversarial neural network
Creators: name: Ð¢ÐºÐ°ÑÐµÐ²Ð°, ÐÐºÐ°ÑÐµÑÐ¸Ð½Ð°
Publisher: name: Ð¡Ð°Ð½ÐºÑ-ÐÐµÑÐµÑÐ±ÑÑÐ³ÑÐºÐ¸Ð¹ Ð¿Ð¾Ð»Ð¸ÑÐµÑÐ½Ð¸ÑÐµÑÐºÐ¸Ð¹ ÑÐ½Ð¸Ð²ÐµÑÑÐ¸ÑÐµÑ ÐÐµÑÑÐ° ÐÐµÐ»Ð¸ÐºÐ¾Ð³Ð¾
Year: 2024
Subjects: ÑÐ¸ÑÑÐµÐ¼Ð° Ð¾Ð±Ð½Ð°ÑÑÐ¶ÐµÐ½Ð¸Ñ Ð²ÑÐ¾ÑÐ¶ÐµÐ½Ð¸Ð¹
Ð³ÐµÐ½ÐµÑÐ°ÑÐ¸Ñ ÑÐ¸Ð½ÑÐµÑÐ¸ÑÐµÑÐºÐ¸Ñ Ð´Ð°Ð½Ð½ÑÑ
Ð³ÐµÐ½ÐµÑÐ°ÑÐ¸Ñ Ð¿Ð¾Ð»ÐµÐ·Ð½Ð¾Ð¹ Ð½Ð°Ð³ÑÑÐ·ÐºÐ¸ Ð°ÑÐ°Ðº
intrusion detection system
synthetic data generation
attack payload generation

description: Ð¦ÐµÐ»ÑÑ ÑÐ°Ð±Ð¾ÑÑ ÑÐ²Ð»ÑÐµÑÑÑ Ð¿Ð¾Ð²ÑÑÐµÐ½Ð¸Ðµ ÑÐµÐ·ÑÐ»ÑÑÐ°ÑÐ¸Ð²Ð½Ð¾ÑÑÐ¸ ÑÐ¸ÑÑÐµÐ¼ Ð¾Ð±Ð½Ð°ÑÑÐ¶ÐµÐ½Ð¸Ñ Ð²ÑÐ¾ÑÐ¶ÐµÐ½Ð¸Ð¸. ÐÑÐµÐ´Ð¼ÐµÑÐ¾Ð¼ Ð¸ÑÑÐ»ÐµÐ´Ð¾Ð²Ð°Ð½Ð¸Ñ ÑÐ²Ð»ÑÐµÑÑÑ Ð¿ÑÐ¾ÑÐµÑÑ Ð¿Ð¾Ð²ÑÑÐµÐ½Ð¸Ñ ÑÐ¾ÑÐ½Ð¾ÑÑÐ¸ ÑÐ¸ÑÑÐµÐ¼ Ð¾Ð±Ð½Ð°ÑÑÐ¶ÐµÐ½Ð¸Ñ Ð²ÑÐ¾ÑÐ¶ÐµÐ½Ð¸Ñ. ÐÐ°Ð´Ð°ÑÐ¸, ÑÐµÑÐ°ÐµÐ¼ÑÐµ Ð² ÑÐ¾Ð´Ðµ Ð¸ÑÑÐ»ÐµÐ´Ð¾Ð²Ð°Ð½Ð¸Ñ: 1. ÐÐ½Ð°Ð»Ð¸Ð· Ð¸Ð·Ð²ÐµÑÑÐ½ÑÑ Ð¼ÐµÑÐ¾Ð´Ð¾Ð² ÑÐµÑÑÐ¸ÑÐ¾Ð²Ð°Ð½Ð¸Ñ Ð½Ð°Ð±Ð¾ÑÐ° Ð¿ÑÐ°Ð²Ð¸Ð» Ð¡ÐÐ, Ð½Ð°Ð¿ÑÐ°Ð²Ð»ÐµÐ½Ð½ÑÑ Ð½Ð° Ð¿Ð¾Ð²ÑÑÐµÐ½Ð¸Ðµ Ð¸Ñ ÑÐµÐ·ÑÐ»ÑÑÐ°ÑÐ¸Ð²Ð½Ð¾ÑÑÐ¸ ÑÐ°Ð±Ð¾ÑÑ Ð¿ÑÐ¸ Ð¾Ð±Ð½Ð°ÑÑÐ¶ÐµÐ½Ð¸Ð¸ Ð²ÑÐ¾ÑÐ¶ÐµÐ½Ð¸Ð¹. 2. Ð Ð°Ð·ÑÐ°Ð±Ð¾ÑÐºÐ° Ð¼ÐµÑÐ¾Ð´Ð° Ð°Ð²ÑÐ¾Ð¼Ð°ÑÐ¸ÑÐµÑÐºÐ¾Ð³Ð¾ ÑÐµÑÑÐ¸ÑÐ¾Ð²Ð°Ð½Ð¸Ñ Ð½Ð°Ð±Ð¾ÑÐ° Ð¿ÑÐ°Ð²Ð¸Ð» Ð¡ÐÐ Ñ Ð¸ÑÐ¿Ð¾Ð»ÑÐ·Ð¾Ð²Ð°Ð½Ð¸ÐµÐ¼ Ð²ÑÑÐ¸ÑÐ»Ð¸ÑÐµÐ»ÑÐ½Ð¾Ð¹ Ð¼Ð¾Ð´ÐµÐ»Ð¸ Ð³ÐµÐ½ÐµÑÐ°ÑÐ¸Ð²Ð½Ð¾-ÑÐ¾ÑÑÑÐ·Ð°ÑÐµÐ»ÑÐ½Ð¾Ð¹ Ð½ÐµÐ¹ÑÐ¾Ð½Ð½Ð¾Ð¹ ÑÐµÑÐ¸. 3. Ð Ð°Ð·ÑÐ°Ð±Ð¾ÑÐºÐ° Ð¿ÑÐ¾Ð³ÑÐ°Ð¼Ð¼Ð½Ð¾Ð³Ð¾ Ð¿ÑÐ¾ÑÐ¾ÑÐ¸Ð¿Ð°, ÑÐµÐ°Ð»Ð¸Ð·ÑÑÑÐ¸Ð¹ Ð¿ÑÐµÐ´Ð»Ð¾Ð¶ÐµÐ½Ð½ÑÐ¹ Ð¼ÐµÑÐ¾Ð´, Ð¸ Ð¾ÑÐµÐ½ÐºÐ° ÐµÐ³Ð¾ ÑÑÑÐµÐºÑÐ¸Ð²Ð½Ð¾ÑÑÑ Ð½Ð° Ð¿ÑÐ¸Ð¼ÐµÑÐµ Ð¡ÐÐ Suricata Ð¿ÑÐ¸ Ð²ÑÑÐ²Ð»ÐµÐ½Ð¸Ð¸ Ð¸ Ð¿Ð¾ÑÐ»ÐµÐ´ÑÑÑÐµÐ¼ ÑÑÑÑÐ°Ð½ÐµÐ½Ð¸Ð¸ Ð´ÐµÑÐµÐºÑÐ° Ð½ÐµÐ¿Ð¾Ð»Ð½Ð¾ÑÑ Ð² Ð¸ÑÐ¿Ð¾Ð»ÑÐ·ÑÐµÐ¼ÑÑ Ð½Ð°Ð±Ð¾ÑÐ°Ñ Ð¿ÑÐ°Ð²Ð¸Ð» Ð¡ÐÐ. Ð ÑÐ¾Ð´Ðµ ÑÐ°Ð±Ð¾ÑÑ Ð±ÑÐ»Ð¸ Ð¸ÑÑÐ»ÐµÐ´Ð¾Ð²Ð°Ð½Ñ ÑÐ°Ð·Ð»Ð¸ÑÐ½ÑÐµ Ð¼ÐµÑÐ¾Ð´Ñ ÑÐµÑÑÐ¸ÑÐ¾Ð²Ð°Ð½Ð¸Ñ Ð½Ð°Ð±Ð¾ÑÐ° Ð¿ÑÐ°Ð²Ð¸Ð» Ð¡ÐÐ.Â  ÐÑÐ»Ð¸ Ð¿ÑÐ¾Ð°Ð½Ð°Ð»Ð¸Ð·Ð¸ÑÐ¾Ð²Ð°Ð½Ñ ÑÐ¾Ð²ÑÐµÐ¼ÐµÐ½Ð½ÑÐµ Ð¸ÑÑÐ»ÐµÐ´Ð¾Ð²Ð°Ð½Ð¸Ñ Ð² Ð¾Ð±Ð»Ð°ÑÑÐ¸ Ð³ÐµÐ½ÐµÑÐ°ÑÐ¸Ð¸ ÑÐ¸Ð½ÑÐµÑÐ¸ÑÐµÑÐºÐ¸Ñ Ð´Ð°Ð½Ð½ÑÑ Ð¸ ÑÐµÑÑÐ¸ÑÐ¾Ð²Ð°Ð½Ð¸Ðµ ÑÐµÑÐµÐ²ÑÑ Ð¡ÐÐ. Ð ÑÐµÐ·ÑÐ»ÑÑÐ°ÑÐµ ÑÐ°Ð±Ð¾ÑÑ Ð±ÑÐ» ÑÐ°Ð·ÑÐ°Ð±Ð¾ÑÐ°Ð½ Ð¼ÐµÑÐ¾Ð´ Ð°Ð²ÑÐ¾Ð¼Ð°ÑÐ¸ÑÐµÑÐºÐ¾Ð³Ð¾ ÑÐµÑÑÐ¸ÑÐ¾Ð²Ð°Ð½Ð¸Ñ Ð½Ð°Ð±Ð¾ÑÐ° Ð¿ÑÐ°Ð²Ð¸Ð» Ð¡ÐÐ Ñ Ð¸ÑÐ¿Ð¾Ð»ÑÐ·Ð¾Ð²Ð°Ð½Ð¸ÐµÐ¼ Ð²ÑÑÐ¸ÑÐ»Ð¸ÑÐµÐ»ÑÐ½Ð¾Ð¹ Ð¼Ð¾Ð´ÐµÐ»Ð¸ Ð³ÐµÐ½ÐµÑÐ°ÑÐ¸Ð²Ð½Ð¾-ÑÐ¾ÑÑÑÐ·Ð°ÑÐµÐ»ÑÐ½Ð¾Ð¹ Ð½ÐµÐ¹ÑÐ¾Ð½Ð½Ð¾Ð¹ ÑÐµÑÐ¸, Ð±ÑÐ»Ð° Ð¿ÑÐ¾Ð´ÐµÐ¼Ð¾Ð½ÑÑÑÐ¸ÑÐ¾Ð²Ð°Ð½Ð° ÑÑÑÐµÐºÑÐ¸Ð²Ð½Ð¾ÑÑÑ Ð¼ÐµÑÐ¾Ð´Ð° Ð½Ð° Ð¡ÐÐ Suricata. ÐÐ¾Ð»ÑÑÐµÐ½Ð½ÑÐµ ÑÐµÐ·ÑÐ»ÑÑÐ°ÑÑ Ð¼Ð¾Ð³ÑÑ Ð±ÑÑÑ Ð¸ÑÐ¿Ð¾Ð»ÑÐ·Ð¾Ð²Ð°Ð½Ñ Ð´Ð»Ñ ÑÐ°ÑÑÐ¸ÑÐµÐ½Ð¸Ñ Ð½Ð°Ð±Ð¾ÑÐ¾Ð² Ð´Ð°Ð½Ð½ÑÑ, ÑÐµÑÑÐ¸ÑÐ¾Ð²Ð°Ð½Ð¸Ñ Ð¡ÐÐ Ð¸ Ð¸Ñ ÑÐ»ÑÑÑÐµÐ½Ð¸Ñ.
description: The purpose of the study is efficiency improvement of intrusion detection systems. The subject of the work is the process of efficiency improvement of intrusion detection systems. The research set the following goals: 1. Analysis of known methods for testing an IDS ruleset aimed at efficiency improvement in detecting intrusions. 2. Development of a method for automatically testing an IDS ruleset on a generative adversarial neural network. 3. Development of a software prototype that implements the proposed method and evaluation of its effectiveness using the example of Suricata IDS in identifying and subsequently eliminating the incompleteness defect in the used sets of IDS rules. During the work various methods for testing an IDS ruleset were explored. Modern studies in synthetic data generation and testing of network IDS were analyzed. As a result of the work, a method for automatically testing an IDS ruleset was developed using generative adversarial neural network, and the effectiveness of the method was demonstrated on the IDS Suricata. The results could be used to expand data sets, test intrusion detection systems and improve them.Â