A novel intrusion detection method based on threshold modification using receiver operating characteristic curve

Class imbalance makes traditional intrusion detection system have low detection rate (DR) and high false positive rate (FR) for minority class, which is unsuitable for practical needs. In order to improve the DRs and reduce FRs of minority classes, we propose a novel intrusion detection method, which combines convolutional neural networks (CNNs) algorithm with threshold modification method based on receiver operating characteristic (ROC) curve. In this method, we use CNNs as a classifier and modify threshold of the classifier through ROC curve. In addition, NSLKDD dataset and UNSW-NB15 dataset have been carried out to evaluate the performance of this method. The experimental results illustrate that the proposed method has a better performance no matter in improving DRs or reducing FRs of minority classes.