Makine öğrenmesi tabanlı ağ anomali tespiti

Intelligent technologies have led to a significant rise in internet users and applications. However, this rise in internet usage has also brought serious security challenges. Organizations rely on Network Intrusion Detection systems (NIDS) to protect sensitive data from unauthorized access and theft. To enhance the capabilities of IDS, Machine Learning (ML) and Deep Learning (DL) techniques have been increasingly integrated into these systems. In this context, anomaly-based network intrusion detection surpasses other detection mechanisms significantly in several instances. These systems analyze network traffic to detect suspicious activities, such as attempted breaches or cyberattacks. However, existing studies lack a thorough assessment of class imbalances, feature selection and extraction methods, hyperparameter optimization, and classification performance for different types of network intrusions: wired, wireless, and Software Defined Networking (SDN). Additionally, existing methods may achieve high accuracy; they may suffer from high training times, low detection rate (DR), and computational complexity. By combining metaheuristics and neural networks, it is possible to solve complex optimization problems that are challenging to solve using conventional methods. To address these challenges, this thesis study first evaluates different network intrusion datasets, such as wired, wireless, and SDN, together, considering class imbalance, feature selection, and hyperparameter optimization tasks. Secondly, it proposes a novel hybrid approach combining Deep Autoencoder (DAE) and Artificial Neural Network (ANN) models trained by a parallel Artificial Bee Colony (ABC) algorithm with Bayesian hyperparameter optimization.