Intrusion Detection on Switchports with LSTM as a Regression Problem

İlhan Fırat Kılınçer

Article Details

Intrusion Detection on Switchports with LSTM as a Regression Problem

Authors:

İlhan Fırat Kılınçer

Publisher:

Marmara University

Main Topics:

Sistem ve Ağ Güvenliği

Journal:

International Journal of Advances in Engineering and Pure Sciences Vol.37 Issue 3, pp.272-280

Document Type:

Article

Publication Date:

9/2025

Document Language:

English

Document ID (Org No.):

2001358172

pISSN:

2636-8277

Keywords:

Abstract:

 With the rapid development of information technologies and smart devices, the protection of digital data has become an important issue. Intrusion detection systems IDS have become one of the indispensable security measures of today for the protection of digital data and for institutions and organizations to ensure service continuity. In this study, a method is presented to prevent attacks that may occur on the ports of switches used in online local networks. The Switchport Anomaly based Intrusion Detection System SPA-IDS dataset used in the proposed method is considered as a regression problem and the intrusion detection performance of the dataset is measured with the Long Short-Term Memory LSTM. The performance values of the dataset used in the study were tested at different time step values and the highest estimated values were reached when the time step value was 10. Root-Mean-Square Error RMSE and R2 score values were calculated as performance metrics in the study and the values of 0.0551 and 0.9953 were reached, respectively. Each data in the dataset used in the study was taken at one-second intervals. Therefore, the time step value of 10 indicates the data taken in 10 seconds. Attack detection is done quickly and with a high success rate based on data received every 10 seconds, which is an extremely positive outcome.

 With the rapid development of information technologies and smart devices, the protection of digital data has become an important issue. Intrusion detection systems IDS have become one of the indispensable security measures of today for the protection of digital data and for institutions and organizations to ensure service continuity. In this study, a method is presented to prevent attacks that may occur on the ports of switches used in online local networks. The Switchport Anomaly based Intrusion Detection System SPA-IDS dataset used in the proposed method is considered as a regression problem and the intrusion detection performance of the dataset is measured with the Long Short-Term Memory LSTM. The performance values of the dataset used in the study were tested at different time step values and the highest estimated values were reached when the time step value was 10. Root-Mean-Square Error RMSE and R2 score values were calculated as performance metrics in the study and the values of 0.0551 and 0.9953 were reached, respectively. Each data in the dataset used in the study was taken at one-second intervals. Therefore, the time step value of 10 indicates the data taken in 10 seconds. Attack detection is done quickly and with a high success rate based on data received every 10 seconds, which is an extremely positive outcome.

 With the rapid development of information technologies and smart devices, the protection of digital data has become an important issue. Intrusion detection systems IDS have become one of the indispensable security measures of today for the protection of digital data and for institutions and organizations to ensure service continuity. In this study, a method is presented to prevent attacks that may occur on the ports of switches used in online local networks. The Switchport Anomaly based Intrusion Detection System SPA-IDS dataset used in the proposed method is considered as a regression problem and the intrusion detection performance of the dataset is measured with the Long Short-Term Memory LSTM. The performance values of the dataset used in the study were tested at different time step values and the highest estimated values were reached when the time step value was 10. Root-Mean-Square Error RMSE and R2 score values were calculated as performance metrics in the study and the values of 0.0551 and 0.9953 were reached, respectively. Each data in the dataset used in the study was taken at one-second intervals. Therefore, the time step value of 10 indicates the data taken in 10 seconds. Attack detection is done quickly and with a high success rate based on data received every 10 seconds, which is an extremely positive outcome.

 Bilgi teknolojileri ve akıllı cihazların hızlı gelişimi ile birlikte dijital verilerin korunması önemli bir konu haline gelmiştir. Saldırı tespit sistemleri IDS, dijital verilerin korunması, kurum ve kuruluşların servis sürekliliğini sağlayabilmeleri için günümüzün vazgeçilmez güvenlik önlemlerinden biri haline gelmiştir. Bu çalışmada çevrimiçi lokal ağlarda kullanılan switch lerin portlarında meydana gelebilecek saldırıların engellenmesine yönelik bir yöntem sunulmuştur. Önerilen yöntemde kullanılan SPA_IDS veri seti bir regresyon problem olarak ele alınmış ve Long Short-Term Memory LSTM derin öğrenme yöntemi ile veri setinin saldırı tespit performansı ölçülmüştür. Çalışmada kullanılan veri setinin farklı time step değerlerindeki performans değerleri test edilmiş ve time step değerinin 10 olduğu durumda en yüksek tahmin değerlerine ulaşılmıştır. Çalışmada performans metrikleri olarak Root-Mean-Square Error RMSE ve R2 skor değerleri hesaplanmış ve sırasıyla 0,0551 ve 0.9953 değerlerine ulaşılmıştır. Çalışmada kullanılan veri setindeki her bir veri bir saniye aralıklar ile alınmıştır. Dolayısıyla time step 10 değeri, 10 saniyede alınan verileri göstermektedir. Her 10 saniyede bir alınan verilere göre hızlı ve yüksek başarım oranıyla saldırı tespitinin yapılıyor son derece pozitif bir çıktıdır.

Article Details

Intrusion Detection on Switchports with LSTM as a Regression Problem

Authors:

İlhan Fırat Kılınçer

Publisher:

Marmara University

Main Topics:

Sistem ve Ağ Güvenliği

Journal:

International Journal of Advances in Engineering and Pure Sciences Vol.37 Issue 3, pp.272-280

Document Type:

Article

Publication Date:

9/2025

Document Language:

English

Document ID (Org No.):

2001358172

pISSN:

2636-8277

IDS

LSTM

Regression

SwitchportSTS

LSTM

Regresyon

Switchport

Issues

Article Details

Authors: İlhan Fırat Kılınçer

Publisher: Marmara University

Main Topics: Sistem ve Ağ Güvenliği

Journal: International Journal of Advances in Engineering and Pure Sciences Vol.37 Issue 3, pp.272-280

Document Type: Article

Publication Date: 9/2025

Document Language: English

Document ID (Org No.): 2001358172

pISSN: 2636-8277

Issues

Authors:

İlhan Fırat Kılınçer

Publisher:

Marmara University

Main Topics:

Sistem ve Ağ Güvenliği

Journal:

International Journal of Advances in Engineering and Pure Sciences Vol.37 Issue 3, pp.272-280

Document Type:

Article

Publication Date:

9/2025

Document Language:

English

Document ID (Org No.):

2001358172

pISSN:

2636-8277