首页|期刊导航|郑州大学学报(理学版)|基于GAN和元学习的伪装流量生成模型

基于GAN和元学习的伪装流量生成模型OA

The Pseudorandom Traffic Generation Model Based on GAN and Meta-learning

中文摘要英文摘要

基于深度学习的恶意流量检测模型容易受到对抗攻击的影响,为了发掘此类模型的安全漏洞并找到提高其鲁棒性的方法,提出一种对抗样本生成模型 ReN-GAN.该模型基于生成对抗网络原理,能够根据流量特征自动生成相应伪装流量并利用对抗样本可迁移性实现黑盒攻击.通过引入动量迭代方法和添加扰动的约束机制,在保证原始流量功能性的同时提高了伪装流量对抗样本的泛化能力.在训练过程中结合元学习理论进行优化,使得目标集成模型能够更有效地捕捉各模型的共同决策边界,提高了生成对抗样本的可迁移性.实验结果表明,ReN-GAN模型在保持原始流量特性的前提下,生成的对抗样本在黑盒检测模型上的平均逃逸率达到了 54.1%,且比其他方法显著缩短了生成时间.此外,在以基于 DNN的分类器为攻击目标进行训练时,ReN-GAN模型仅需 5 次迭代即可生成逃逸率为 62%的伪装流量,大幅减少了交互次数.

The deep learning-based malicious traffic detection model is susceptible to adversarial attacks.In order to uncover security vulnerabilities with such models and find ways to enhance the robustness,an adversarial sample generation model(ReN-GAN)was proposed.Based on the principles of generative adversarial networks(GANs),the model could automatically generate relevant disguised traffic based on traffic features and utilize the transferability of adversarial samples to achieve black-box attacks.By intro-ducing momentum iteration methods and adding constraints on perturbations,the generalization capability of disguised traffic adversarial samples while ensuring the functionality of the original traffic was en-hanced.During training,the model was optimized by integrating meta-learning theory,enabling the tar-get integrated model to capture the common decision boundaries of various models more effectively and enhancing the transferability of generated adversarial samples.Experimental results showed that the ad-versarial samples generated by the ReN-GAN model,while preserving the characteristics of the original traffic,achieved an average evasion rate of 54.1%on black-box detection models,significantly reducing the generation time compared to other methods.Furthermore,when trained on classifiers based on DNN,the ReN-GAN model required only five iterations to generate disguised traffic with an evasion rate of 62%,greatly reducing the interaction times.

邹元怀;张淑芬;张祖篡;高瑞;马将

华北理工大学 理学院 河北 唐山 063210||河北省数据科学与应用重点实验室 河北 唐山 063210华北理工大学 理学院 河北 唐山 063210||河北省数据科学与应用重点实验室 河北 唐山 063210||唐山市数据科学重点实验室 河北 唐山 063210华北理工大学 理学院 河北 唐山 063210||河北省数据科学与应用重点实验室 河北 唐山 063210华北理工大学 理学院 河北 唐山 063210||河北省数据科学与应用重点实验室 河北 唐山 063210华北理工大学 理学院 河北 唐山 063210

信息技术与安全科学

生成对抗网络恶意流量对抗样本元学习黑盒攻击

generative adversarial networkmalicious trafficadversarial samplesmeta-learningblack-box attack

《郑州大学学报(理学版)》 2026 (1)

35-42,8

国家自然科学基金项目(U20A20179)

10.13705/j.issn.1671-6841.2024118

评论