IJCATR Volume 10 Issue 1

SSH-Brute Force Attack Detection Model based on Deep Learning

Stephen Kahara Wanjau, Geoffrey Mariga Wambugu, Gabriel Ndung’u Kamau
10.7753/IJCATR1001.1008
keywords : Convolutional Neural Network, Deep Learning, Feature Selection, Network Security, Occam’s razor principle, SSH Brute force

PDF
The rising number of malicious threats on computer networks and Internet services owing to a large number of attacks makes the network security be at incessant risk. One of the predominant network attacks that poses distressing threats to networks security are the brute force attacks. A brute force attack uses a trial and error algorithm to decode encrypted data such as passwords or Data Encryption Standard keys, through exhaustive effort (using brute force) rather than using intellectual strategies. Brute force attacks resemble legitimate network traffic, making it difficult to defend an organization that rely mainly on perimeter-based security solutions a major challenge. For stopping the occurrence of such attacks, several curable steps must be taken. This paper proposes an efficient mechanism for SSH-Brute force network attacks detection based on a supervised deep learning algorithm, Convolutional Neural Network. The model performance was compared with experimental results from 5 classical machine learning algorithms including Naive Bayes, Logistic Regression, Decision Tree, k-Nearest Neighbour, and Support Vector Machine. Four standard metrics namely, Accuracy, Precision, Recall, and the F-measure were used. Results show that the CNN-based model is superior to the traditional machine learning methods with 94.3% accuracy, a precision rate of 92.5%, recall rate of 97.8% and F1-score of 91.8% in terms of the ability to detect SSH-Brute force attacks.
@artical{s1012021ijcatr10011008,
Title = "SSH-Brute Force Attack Detection Model based on Deep Learning",
Journal ="International Journal of Computer Applications Technology and Research(IJCATR)",
Volume = "10",
Issue ="1",
Pages ="42 - 50",
Year = "2021",
Authors ="Stephen Kahara Wanjau, Geoffrey Mariga Wambugu, Gabriel Ndung’u Kamau"}
  • The paper proposes an efficient mechanism for SSH-Brute force network attacks detection
  • Feature selection algorithm is used for identifying the most relevant features from a benchmark dataset
  • CNN algorithm was used for model training with raw data was converted into images
  • Experimental results demonstrates that our model performs better in terms of accuracy and precision when compared with 5 other classical machine learning algorithms.