基于深度学习的入侵检测方法
作者:
作者单位:

作者简介:

通讯作者:

中图分类号:

基金项目:

国家重点研发计划 (2018YFB1403303); 辽宁省教育厅高校科研基金 (2021LJKZ0327)


Intrusion Detection Method Based on Deep Learning
Author:
Affiliation:

Fund Project:

  • 摘要
  • |
  • 图/表
  • |
  • 访问统计
  • |
  • 参考文献
  • |
  • 相似文献
  • |
  • 引证文献
  • |
  • 资源附件
  • |
  • 文章评论
    摘要:

    面向海量高维数据场景时, 入侵检测技术仍面临数据分布不平衡、检测准确率低的问题, 针对这些问题提出一种基于深度学习的入侵检测方法. 首先, 在数据预处理阶段, 使用基于扩散模型改进的自编码器模型进行特征选择并生成高质量少数类异常流量样本, 使用SMOTE-Tomek技术进一步升采样并去除噪声数据, 使用离群点检测技术去除离群点样本. 其次, 构建新的深度学习模型, 将预处理后的数据输入引入分割注意力机制的BERT编码器中对不同特征子空间进行更细粒度的建模, 生成的向量信息转换为特征灰度图后输入改进ResNet模型, 通过在原ResNet网络中融合金字塔池化、深度可分离卷积以及焦点注意力机制分层次逐步提取特征, 最终输出融合多尺度信息且重点突出的精细化特征表达. 最后, 基于训练后模型进行分类实验. 在NSL-KDD数据集上的有效性实验结果表明, 二分类准确率达92.92%, 五分类准确率达86.41%, 均优于其他对比模型. 在UNSW-NB15数据集上的可行性实验则进一步验证了所提模型具有良好的分类性能及应对数据分布不平衡的能力.

    Abstract:

    When dealing with massive high-dimensional data scenarios, intrusion detection technologies still confront issues such as imbalanced data distribution and low detection accuracy. To address these problems, an intrusion detection method based on deep learning is proposed. Firstly, during the data preprocessing stage, an improved autoencoder model based on the diffusion model is utilized for feature selection and the generation of high-quality minority-class abnormal traffic samples. The SMOTE-Tomek technique is employed for further upsampling and noise removal, and outlier detection techniques are adopted to remove outlier samples. Secondly, a novel deep learning model is constructed. The preprocessed data is input into a BERT encoder with split attention mechanisms to model different feature subspaces in a more fine-grained manner. The generated vector information is transformed into feature grayscale images and then input into the improved ResNet model. By integrating pyramid pooling, depthwise separable convolutions, and focal attention mechanisms in the original ResNet network, the model hierarchically extracts features step-by-step, ultimately outputting refined feature representations that integrate multi-scale information and emphasize critical features. Finally, classification experiments are conducted based on the trained model. The effectiveness experimental results on the NSL-KDD dataset indicate that the proposed model achieves 92.92% binary classification accuracy and 86.41% five-class classification accuracy, outperforming all other comparative models. The feasibility experiments on the UNSW-NB15 dataset further validate that the proposed model possesses excellent classification performance and the capability to handle imbalanced data distribution.

    参考文献
    相似文献
    引证文献
引用本文

陈万志,黄振川,王天元.基于深度学习的入侵检测方法.计算机系统应用,2025,34(9):170-179

复制
分享
相关视频

文章指标
  • 点击次数:
  • 下载次数:
  • HTML阅读次数:
  • 引用次数:
历史
  • 收稿日期:2025-02-07
  • 最后修改日期:2025-03-04
  • 录用日期:
  • 在线发布日期: 2025-07-25
  • 出版日期:
文章二维码
您是第位访问者
版权所有:中国科学院软件研究所 京ICP备05046678号-3
地址:北京市海淀区中关村南四街4号,邮政编码:100190
电话:010-62661041 传真: Email:csa@iscas.ac.cn
技术支持:北京勤云科技发展有限公司

京公网安备 11040202500063号