基于特征重构与MIR-BiLSTM的入侵检测方法OA
Intrusion detection method based on feature reconstruction and MIR-BiLSTM
针对当前基于深度学习的入侵检测模型存在计算复杂度高、对不平衡数据适应性差,导致检测准确率偏低等问题,文中设计一种基于特征重构与轻量MIR-BiLSTM的混合检测模型.首先,采用结合过采样与欠采样的SMOTE-ENN算法解决类别不平衡问题;其次,设计改进堆叠自编码器(SAE)对输入特征进行降维与增强,通过无监督预训练提取低维鲁棒特征表示;接着,构建包含可变形卷积LBL模块的MIR-BiLSTM架构,结合多分支空间建模与双向时序分析,实现高效特征提取;最后,采用分阶段训练策略优化特征与任务的适配性.实验结果表明,所提模型参数量仅为2.76 MB(较MobileViT降低51.3%),在测试集上达到了98.15%的准确率和97.35%的F1-score,性能优于现有轻量化入侵检测模型,为边缘计算环境提供了良好的解决方案.
In view of the low detection accuracy caused by high computational complexity and poor adaptability to unbalanced data in current deep learning based intrusion detection models,this paper designs a hybrid detection model based on feature reconstruction and lightweight MIR-BiLSTM.Firstly,the SMOTE-ENN algorithm combining oversampling and undersampling is used to eliminate the category imbalance.Secondly,the improved stacked auto encoder(SAE)is designed to downscale and enhance the input features,and the low-dimensional robust feature representation is extracted by unsupervised pre-training.Next,the MIR-BiLSTM architecture including deformable convolutional LBL module is constructed,which achieves efficient feature extraction by combining multi-branch spatial modeling and bi-directional timing analysis.Finally,a staged training strategy is used to optimize the feature-task fitness.Experiments show that the proposed model requires a parameter count of only 2.76 MB(51.3%lower than MobileViT)and achieves an accuracy of 98.15%and an F1-score of 97.35%on the test set,which outperforms the existing lightweight intrusion detection models.To sum up,it provides an effective solution for edge computing environments.
崔颖;李会格;杨雪蓉;卢开喜
江苏科技大学 计算机学院,江苏 镇江 212100江苏科技大学 计算机学院,江苏 镇江 212100江苏科技大学 计算机学院,江苏 镇江 212100江苏科技大学 计算机学院,江苏 镇江 212100
信息技术与安全科学
入侵检测不平衡处理SAEMIR-BiLSTMLeaky ReLU注意力机制
intrusion detectionimbalance processingSAEMIR-BiLSTMLeaky ReLUattention mechanism
《现代电子技术》 2026 (13)
83-89,7
国家自然科学基金资助项目(12401696)国家自然科学基金资助项目(61702234)船舶总体性能创新研究开放基金(25422217)
评论