动态特征融合的域自适应入侵检测方法研究OA
Research on Domain Adaptive Intrusion Detection Method Based on Dynamic Feature Fusion
针对入侵检测研究中特征提取不全面、模型泛化能力差的问题,提出了一种动态特征融合的域自适应入侵检测方法:首先,通过卷积神经网络提取空间特征,利用双向长短期记忆网络提取时序特征,全面提取网络流量数据的多维特征信息;其次,通过计算2种特征的信息熵衡量不确定性,根据熵值分配不同的权重,并根据权重将提取的特征加权融合;最后,在训练过程中使用提出的自适应域权重损失算法动态调节源域和目标域数据的贡献比例,以提高模型在目标域数据上的泛化能力.在NSL-KDD和UNSW-NB15数据集上的实验表明,与现有的主流方法相比该方法具有更高的检测准确率,分别达到0.856 3和0.916.
Aiming at the problems of incomplete feature extraction and limited model generalization ability in intrusion detection research,a domain adaptive intrusion detection method with dynamic feature fusion is proposed.Firstly,a convolutional neural network is used to extract spatial features,while a bidirectional long short-term memory network is utilized for temporal feature extraction.This approach enables comprehensive extraction of multi-dimensional feature information from network traffic data.Secondly,the uncertainty is measured by calculating the information entropy of the two features,and different weights are assigned according to the entropy value,and the extracted features are weighted and fused according to the weights.Finally,during the training process,the proposed adaptive domain weight loss algorithm is used to dynamically adjust the contribution of the source domain and target domain data to improve the generalization ability of the model on the target domain data.Experiments are carried out using the NSL-KDD and UNSW-NB15 datasets.Compared with the existing mainstream methods,this method has higher detection accuracy,which is 0.856 3 and 0.916 respectively.
陈丽芳;赵人喆;曹柯欣;韩阳;代琪
华北理工大学理学院 河北唐山 063210||河北省数据科学与应用重点实验室 河北唐山 063210华北理工大学理学院 河北唐山 063210华北理工大学理学院 河北唐山 063210华北理工大学理学院 河北唐山 063210华北理工大学理学院 河北唐山 063210
信息技术与安全科学
特征提取动态特征融合域自适应入侵检测源域目标域
feature extractiondynamic feature fusiondomain adaptiveintrusion detectionsource domaintarget domain
《信息安全研究》 2026 (4)
294-302,9
国家自然科学基金面上项目(52074126)河北省高等学校科学技术研究项目(BJ2025217)唐山市科学技术局应用基础研究项目(24130202C)
评论